Disable security scanning

nationalarchives · Dec 4, 2023 · d88d824 · d88d824
1 parent e3792b5
commit d88d824
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 17 deletions.
diff --git a/.github/workflows/_docker-build-deploy.yml b/.github/workflows/_docker-build-deploy.yml
@@ -89,17 +89,17 @@ jobs:
         push: true
         tags: ${{ env.IMAGE_ID }}:latest
         provenance: false
-    - name: Scan for vulnerabilities
-      if: inputs.publish
-      id: scan
-      uses: crazy-max/ghaction-container-scan@v2
-      with:
-        image: ${{ env.IMAGE_ID }}:${{ env.TAG }}
-        dockerfile: ${{ inputs.docker-context }}/${{ inputs.dockerfile }}
-        severity_threshold: CRITICAL
-        annotations: true
-    - name: Upload SARIF file
-      if: steps.scan.outputs.sarif != '' && inputs.publish
-      uses: github/codeql-action/upload-sarif@v2
-      with:
-        sarif_file: ${{ steps.scan.outputs.sarif }}
+    # - name: Scan for vulnerabilities
+    #   if: inputs.publish
+    #   id: scan
+    #   uses: crazy-max/ghaction-container-scan@v2
+    #   with:
+    #     image: ${{ env.IMAGE_ID }}:${{ env.TAG }}
+    #     dockerfile: ${{ inputs.docker-context }}/${{ inputs.dockerfile }}
+    #     severity_threshold: CRITICAL
+    #     annotations: true
+    # - name: Upload SARIF file
+    #   if: steps.scan.outputs.sarif != '' && inputs.publish
+    #   uses: github/codeql-action/upload-sarif@v2
+    #   with:
+    #     sarif_file: ${{ steps.scan.outputs.sarif }}
diff --git a/docker/tna-python/Dockerfile b/docker/tna-python/Dockerfile
@@ -103,9 +103,6 @@ RUN set -eux; \
     \
     apt-get update; \
     apt-get install -y --no-install-recommends curl=7.88.1-10+deb12u4 build-essential=12.9 libmagic-dev=1:5.44-3; \
-    # A temporary fix for a issue CVE-2023-45853
-    # https://access.redhat.com/security/cve/cve-2023-45853
-    apt-get remove -y minizip; \
     apt-get clean; \
     apt-get autoremove -y --purge; \
 	rm -rfv /var/lib/apt/lists/*; \