From 992ad85826b6a83e2194adff3679ef33081203ff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Benjam=C3=ADn=20P=C3=A9rez?= <87045458+benji811124@users.noreply.github.com> Date: Tue, 18 Jun 2024 17:16:51 -0600 Subject: [PATCH] Delete .github/workflows/dependabot.yml RAD-5498_delete_dependabot We recently realized that our GitHub Workflows are potentially unsafe. Delete the dependabot.yml from all the projects in the repo. --- .github/workflows/dependabot.yml | 22 ---------------------- 1 file changed, 22 deletions(-) delete mode 100644 .github/workflows/dependabot.yml diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml deleted file mode 100644 index 12a5cc0..0000000 --- a/.github/workflows/dependabot.yml +++ /dev/null @@ -1,22 +0,0 @@ -name: GitHub Security Alerts for Jira - -on: - schedule: - - cron: '0 2 * * *' - workflow_dispatch: - -jobs: - syncSecurityAlerts: - runs-on: ubuntu-latest - steps: - - name: "Sync security alerts to Jira issues" - uses: reload/github-security-jira@v1.x - env: - GH_SECURITY_TOKEN: ${{ secrets.GH_SECURITY_TOKEN }} - JIRA_TOKEN: ${{ secrets.JIRA_API_TOKEN }} - JIRA_HOST: https://radixiot.atlassian.net - JIRA_USER: ${{ secrets.JIRA_API_EMAIL }} - JIRA_ISSUE_TYPE: Security - JIRA_ISSUE_LABELS: Dependabot - JIRA_PROJECT: RAD - JIRA_WATCHERS: benjamin.perez@radixiot.com