From 9e66297e3b76b16e2acfe6e0ed71a60572044f16 Mon Sep 17 00:00:00 2001
From: Jeroen <jeroen.meert@wolterskluwer.com>
Date: Mon, 27 Jul 2026 10:57:10 +0100
Subject: [PATCH] chore: remove SCA workflows / properties (repo flagged
 non-production or SCA-not-applicable)

---
 .github/workflows/blackduck.yml | 33 ---------------------------------
 .github/workflows/checkmarx.yml | 33 ---------------------------------
 .github/workflows/sonarqube.yml | 28 ----------------------------
 sonar-project.properties        |  1 -
 4 files changed, 95 deletions(-)
 delete mode 100644 .github/workflows/blackduck.yml
 delete mode 100644 .github/workflows/checkmarx.yml
 delete mode 100644 .github/workflows/sonarqube.yml
 delete mode 100644 sonar-project.properties

diff --git a/.github/workflows/blackduck.yml b/.github/workflows/blackduck.yml
deleted file mode 100644
index 1324ce4941a..00000000000
--- a/.github/workflows/blackduck.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: Black Duck
-on:
-  push:
-    branches: [ "master" ]
-  pull_request:
-    branches: [ "master" ]
-  workflow_dispatch:
-jobs:
-  blackduck:
-    name: ${{ github.event.repository.name }}
-    runs-on: ubuntu-latest
-    environment: Release
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Set up JDK 21
-        uses: actions/setup-java@v4
-        with:
-          java-version: '21'
-          distribution: 'corretto'
-      - name: Run Black Duck Detect
-        shell: bash
-        run: bash <(curl -s -L https://detect.blackduck.com/detect10.sh)
-        env:
-          BLACKDUCK.URL: 'https://wolterskluwer.app.blackduck.com/'
-          BLACKDUCK.API.TOKEN: ${{ secrets.BLACKDUCK_ACCESS_TOKEN }}
-          BLACKDUCK.TRUST.CERT: 'true'
-          DETECT.PROJECT.VERSION.NAME: '1.0.0'
-          DETECT.PROJECT.NAME: ${{ github.event.repository.name }}
-          DETECT.PROJECT.TAGS: '041800002496'
-          DETECT.PROJECT.GROUP.NAME: 'dxg.TAA.Clearfacts'
diff --git a/.github/workflows/checkmarx.yml b/.github/workflows/checkmarx.yml
deleted file mode 100644
index aed1f960546..00000000000
--- a/.github/workflows/checkmarx.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-on:
-  workflow_dispatch:
-
-  schedule:
-    - cron: "0 23 * * 1"
-env:
-  CLEARFACTS_CHECKMARX_USER: ${{ secrets.CLEARFACTS_CHECKMARX_USER }}
-  CLEARFACTS_CHECKMARX_PWD: ${{ secrets.CLEARFACTS_CHECKMARX_PWD }}
-  CLEARFACTS_CX_CLIENT_SECRET: ${{ secrets.CLEARFACTS_CX_CLIENT_SECRET }}
-
-name: Checkmarx
-
-jobs:
-  checkmarx:
-    name: checkmarx
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Checkmarx CxFlow Action
-        uses: checkmarx-ts/checkmarx-cxflow-github-action@v1.9
-        with:
-          checkmarx_url: https://test4tools.cchaxcess.com
-          checkmarx_username: ${{ env.CLEARFACTS_CHECKMARX_USER }}
-          checkmarx_password: ${{ env.CLEARFACTS_CHECKMARX_PWD }}
-          checkmarx_client_secret: ${{ env.CLEARFACTS_CX_CLIENT_SECRET }}
-          team: CxServer/SP/Wolters Kluwer TAA/Finca/Clearfacts
-          incremental: true
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          project: ${{ github.event.repository.name }}
-          params: --checkmarx.version=9.6 -logging.level.org.springframework.web.client.RestTemplate=TRACE --logging.level.com.checkmarx.flow.service=DEBUG --logging.level.org.apache.http.wire=TRACE
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
deleted file mode 100644
index ab855530f67..00000000000
--- a/.github/workflows/sonarqube.yml
+++ /dev/null
@@ -1,28 +0,0 @@
-on:
-  push:
-    branches:
-      - master
-  pull_request:
-    types: [opened, synchronize, reopened]
-
-name: Sonarqube
-jobs:
-  sonarqube:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-      with:
-        # Disabling shallow clones is recommended for improving the relevancy of reporting
-        fetch-depth: 0
-    - name: Resolve environment variables
-      if: github.ref == 'refs/heads/master'
-      shell: bash
-      run: echo "BUILD_NUMBER=v${{ github.run_number }}" >> $GITHUB_ENV
-    - name: SonarQube Scan
-      uses: SonarSource/sonarqube-scan-action@v5.1.0 # Ex: v4.1.0, See the latest version at https://github.com/marketplace/actions/official-sonarqube-scan
-      env:
-        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
-      with:
-        args: >
-          ${{ github.ref == 'refs/heads/master' && format('-Dsonar.projectVersion={0}', env.BUILD_NUMBER) || '' }}
diff --git a/sonar-project.properties b/sonar-project.properties
deleted file mode 100644
index d85c1e7fc8a..00000000000
--- a/sonar-project.properties
+++ /dev/null
@@ -1 +0,0 @@
-sonar.projectKey=clearfacts:cf_developer_docs