Remove GitHub workflow metadata
Jaime Fournier <jaimef@linbsd.org>
312f602c315f2997fc92b0490894ff6444440dc6
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
deleted file mode 100644
index a4a7621..0000000
--- a/.github/workflows/ci.yml
+++ /dev/null
@@ -1,36 +0,0 @@
-name: CI
-
-on:
- push:
- branches: [main, master]
- pull_request:
- workflow_dispatch:
-
-permissions:
- contents: read
-
-jobs:
- build-test-audit:
- runs-on: ubuntu-latest
- timeout-minutes: 60
- steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
- - name: Install system dependencies
- run: |
- set -eu
- sudo apt-get update
- sudo apt-get install -y build-essential git curl ca-certificates ripgrep pkg-config libncurses-dev uuid-dev
-
- - name: Install Rust
- # Pinned action commit for the Rust 1.88.0 branch.
- uses: dtolnay/rust-toolchain@4e529fb27e59237866a6523e61ab248308c068b4 # gitsafe:ignore
-
- - name: Install cargo-audit
- run: cargo install cargo-audit --version 0.22.2 --locked
-
- - name: Build and test
- run: make test
-
- - name: Security audit
- run: make audit
diff --git a/.github/workflows/security-baseline.yml b/.github/workflows/security-baseline.yml
deleted file mode 100644
index 35c0328..0000000
--- a/.github/workflows/security-baseline.yml
+++ /dev/null
@@ -1,42 +0,0 @@
-name: Security Baseline
-
-on:
- push:
- branches: [main, master]
- pull_request:
- workflow_dispatch:
-
-permissions:
- contents: read
-
-jobs:
- baseline:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
- - name: Required release files
- run: |
- set -eu
- test -f LICENSE
- test -f SECURITY.md
- test -f .gitignore
- find . -maxdepth 1 -iname "README*" -type f | grep -q .
-
- - name: High-confidence secret scan
- run: |
- set -eu
- pattern="(BEGIN (RSA|OPENSSH|EC|DSA|PRIVATE) KEY|ghp_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,}|sk-(ant-api03|proj|svcacct)-[A-Za-z0-9_-]{30,}|AKIA[0-9A-Z]{16})"
- matches="$(git grep -n -I -E "$pattern" -- . ":!*.png" ":!*.jpg" ":!*.jpeg" ":!*.gif" ":!*.so" ":!*.dylib" ":!*.o" ":!*.a" ":!*.boot" ":!*.tar.gz" || true)"
- if [ -n "$matches" ]; then
- echo "$matches"
- echo "High-confidence secret pattern found."
- exit 1
- fi
-
- - name: Application credential gate
- run: |
- set -eu
- test ! -e .repl-token
- ! git ls-files --error-unmatch .repl-token >/dev/null 2>&1
- ! git grep -n -I -E '(compile-time-token|JCODE_REPL_TOKEN|REPL_TOKEN_FILE)' -- Makefile src support scripts '.github/workflows/ci.yml'