Add temporary workflow to clear legacy Trivy alerts (#44942)

2026-05-07 10:42:42 -05:00
parent 62c1033868
commit 071cfb3c73
1 changed files with 21 additions and 0 deletions
@@ -0,0 +1,21 @@
+name: Close legacy trivy alerts
+on: workflow_dispatch
+permissions:
+  security-events: write
+  contents: read
+jobs:
+  reset:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          cat > clean.sarif <<'EOF'
+          {
+            "version": "2.1.0",
+            "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
+            "runs": [{ "tool": { "driver": { "name": "Trivy" } }, "results": [] }]
+          }
+          EOF
+      - uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: clean.sarif
+          category: .github/workflows/trivy-scan.yml:trivy