From ac2d4b617a5b0b8d8b8148a7241670d813bfed2e Mon Sep 17 00:00:00 2001
From: Andras Schmelczer <andras@schmelczer.dev>
Date: Sat, 6 Jun 2026 20:55:36 +0100
Subject: [PATCH] Remove scan

---
 .forgejo/workflows/docker-publish.yml | 22 ----------------------
 1 file changed, 22 deletions(-)

diff --git a/.forgejo/workflows/docker-publish.yml b/.forgejo/workflows/docker-publish.yml
index fb05591..18ed5fc 100644
--- a/.forgejo/workflows/docker-publish.yml
+++ b/.forgejo/workflows/docker-publish.yml
@@ -59,25 +59,3 @@ jobs:
           context: .
           push: ${{ github.event_name != 'pull_request' }}
           token: ${{ secrets.FORGEJO_PACKAGE_TOKEN }}
-
-  security-scan:
-    needs: build-and-push
-    runs-on: docker
-    if: github.event_name != 'pull_request'
-    steps:
-      - name: Resolve registry host
-        id: registry
-        run: |
-          host="$(echo '${{ github.server_url }}' | sed -E 's|https?://||; s|/$||')"
-          [ "$host" = "forgejo:3000" ] && host="127.0.0.1:13000"
-          echo "image=${host}/$(echo '${{ github.repository }}' | tr '[:upper:]' '[:lower:]')" >> "$GITHUB_OUTPUT"
-
-      - name: Run Trivy vulnerability scanner
-        # Pinned to the commit behind trivy-action v0.36.0 for a reproducible,
-        # supply-chain-safe reference instead of the moving @master branch.
-        uses: https://github.com/aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25
-        with:
-          image-ref: ${{ steps.registry.outputs.image }}:latest
-          format: "table"
-          exit-code: "1"
-          severity: "CRITICAL,HIGH"