From 80b2d7e96edcd5e2b711b8b1349aa1f8b6e4f5ea Mon Sep 17 00:00:00 2001 From: Anshul Nautiyal Date: Wed, 2 Sep 2026 12:44:50 +0530 Subject: [PATCH 1/2] ci: skip Snyk scan for fork pull requests --- .github/workflows/snyk.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index 17721020..41dfa814 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -24,6 +24,8 @@ jobs: check: name: Check for Vulnerabilities + # Repository secrets are unavailable to workflows from external forks. + if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork == false runs-on: ubuntu-latest steps: @@ -36,4 +38,4 @@ jobs: - uses: snyk/actions/gradle-jdk11@9adf32b1121593767fc3c057af55b55db032dc04 # pin@1.0.0 env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} \ No newline at end of file + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} From efdb64bafd77baa656a5f648261f6a93b6db1741 Mon Sep 17 00:00:00 2001 From: Anshul Nautiyal Date: Wed, 2 Sep 2026 14:08:01 +0530 Subject: [PATCH 2/2] ci: remove empty Semgrep workflow --- .github/workflows/semgrep.yml | 0 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 .github/workflows/semgrep.yml diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml deleted file mode 100644 index e69de29b..00000000