Skip to content

Commit f7cf07f

Browse files
Tamara-Barumclaude
andcommitted
chore: Remove SourceClear scan workflow
Following Python SDK's approach (commit d651911), removing the SourceClear GitHub Actions workflow to address security risks. The curl|bash pattern in this workflow presented a security vulnerability. Rather than replace with official action, we're removing it entirely to align with the Python SDK security remediation strategy. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent 8b095a9 commit f7cf07f

1 file changed

Lines changed: 1 addition & 16 deletions

File tree

.github/workflows/php.yml

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -22,24 +22,9 @@ jobs:
2222
- name: Run linting
2323
run: composer lint
2424

25-
source_clear:
26-
name: Source Clear Scan
27-
runs-on: ubuntu-latest
28-
steps:
29-
- name: Checkout code
30-
uses: actions/checkout@v3
31-
32-
- name: Veracode SCA Scan
33-
env:
34-
SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}
35-
uses: veracode/veracode-sca@v2
36-
with:
37-
github_token: ${{ secrets.GITHUB_TOKEN }}
38-
create-issues: false
39-
4025
unit_tests:
4126
name: Unit Tests ${{ matrix.php-versions }}
42-
needs: [ linting, source_clear ]
27+
needs: [ linting ]
4328
runs-on: ubuntu-latest
4429
strategy:
4530
fail-fast: false

0 commit comments

Comments
 (0)