From 36a57cd32c79803326dc4a9f86a6293ff3f2afae Mon Sep 17 00:00:00 2001
From: Kostas Koumantaros <kkoumantaros@users.noreply.github.com>
Date: Thu, 26 Mar 2026 14:23:48 +0100
Subject: [PATCH 1/2] Delete .github/workflows/trivy-master.yml

---
 .github/workflows/trivy-master.yml | 38 ------------------------------
 1 file changed, 38 deletions(-)
 delete mode 100644 .github/workflows/trivy-master.yml

diff --git a/.github/workflows/trivy-master.yml b/.github/workflows/trivy-master.yml
deleted file mode 100644
index 290fb49b..00000000
--- a/.github/workflows/trivy-master.yml
+++ /dev/null
@@ -1,38 +0,0 @@
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-jobs:
-  supply-chain:
-      runs-on: ubuntu-latest
-      steps:
-        - name: checkout code
-          uses: actions/checkout@v4
-        - name: Scan and Generate SBOM
-          uses: aquasecurity/trivy-action@0.32.0
-          with:
-            format: "cyclonedx"
-            exit-code: "1"
-            hide-progress: true
-            output: "dependencies.cdx.json"
-            ignore-unfixed: true
-            scan-type: "fs"
-            scan-ref: "."
-            github-pat: ${{ secrets.GITHUB_TOKEN }}
-            severity: "CRITICAL,HIGH"
-            skip-dirs: website
-          env:
-            TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
-        - name: Deliver BOM to Dependency Tracker
-          run: |
-            curl -v -X POST \
-            -H "X-Api-Key: ${{ secrets.DEPTRACK_API_KEY }}" \
-            -H 'Accept: application/json' \
-            -H 'Content-Type: multipart/form-data' \
-            -F "project=${{ secrets.DEPTRACK_PROJECT_ID }}" \
-            -F "bom=@dependencies.cdx.json" \
-            -F "isLatest=true" \
-            https://sms.eoscnode.org/api/v1/bom

From 90f9595f2c523d089b7727ecf23671f20a54e0ea Mon Sep 17 00:00:00 2001
From: Kostas Koumantaros <kkoumantaros@users.noreply.github.com>
Date: Thu, 26 Mar 2026 14:29:14 +0100
Subject: [PATCH 2/2] Delete .github/workflows/trivy.yml

---
 .github/workflows/trivy.yml | 53 -------------------------------------
 1 file changed, 53 deletions(-)
 delete mode 100644 .github/workflows/trivy.yml

diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
deleted file mode 100644
index 783b306c..00000000
--- a/.github/workflows/trivy.yml
+++ /dev/null
@@ -1,53 +0,0 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-
-name: trivy
-
-on:
-  push:
-    branches: [ "devel" ]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ "devel" ]
- # schedule:
- #   - cron: '44 1 * * 3'
-
-permissions:
-  contents: read
-
-jobs:
-  build:
-    permissions:
-      contents: read # for actions/checkout to fetch code
-      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
-      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
-    name: Build
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Scan repository with Trivy
-        uses: aquasecurity/trivy-action@0.20.0
-        with:
-          scan-type: fs
-          ignore-unfixed: true
-          format: 'sarif'  
-          limit-severities-for-sarif: true #By default SARIF format enforces output of all vulnerabilities. To override this behavior set this parameter to true
-          severity: 'HIGH,CRITICAL'
-          output: trivy-results.sarif
-          skip-dirs: website 
-        continue-on-error: true  # still upload SARIF even if vulnerabilities exist
-
-      - name: Debug SARIF
-        run: |
-            head -n 20 trivy-results.sarif
-            jq .version trivy-results.sarif   
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: trivy-results.sarif
-          # Optional category for the results
-          # Used to differentiate multiple results for one commit