From 92d37315c9a5e350d9cd567f77a8d62d3659cf99 Mon Sep 17 00:00:00 2001
From: Ryan Richard <richardry@vmware.com>
Date: Fri, 27 Mar 2026 11:41:46 -0700
Subject: [PATCH] temporarily remove trivy from security-scan pipeline

---
 pipelines/security-scan/pipeline.yml | 104 +++++++++++++--------------
 1 file changed, 52 insertions(+), 52 deletions(-)

diff --git a/pipelines/security-scan/pipeline.yml b/pipelines/security-scan/pipeline.yml
index 57b4979f3..74f86d6eb 100644
--- a/pipelines/security-scan/pipeline.yml
+++ b/pipelines/security-scan/pipeline.yml
@@ -67,23 +67,23 @@ resources:
       branch: ci
       username: ((ci-bot-access-token-with-read-only-public-repos))
 
-  - name: pinniped-latest-release-image
-    type: registry-image
-    icon: docker
-    check_every: 10m
-    source:
-      repository: ghcr.io/vmware/pinniped/pinniped-server
-      tag: latest
-
-  - name: pinniped-latest-main-image
-    type: registry-image
-    icon: docker
-    check_every: 10m
-    source:
-      repository: ((ci-ghcr-registry))/ci-build
-      username: ((ci-ghcr-puller-username))
-      password: ((ci-ghcr-puller-token))
-      tag: latest
+#  - name: pinniped-latest-release-image
+#    type: registry-image
+#    icon: docker
+#    check_every: 10m
+#    source:
+#      repository: ghcr.io/vmware/pinniped/pinniped-server
+#      tag: latest
+#
+#  - name: pinniped-latest-main-image
+#    type: registry-image
+#    icon: docker
+#    check_every: 10m
+#    source:
+#      repository: ((ci-ghcr-registry))/ci-build
+#      username: ((ci-ghcr-puller-username))
+#      password: ((ci-ghcr-puller-token))
+#      tag: latest
 
   - name: gh-cli-image
     type: registry-image
@@ -203,41 +203,41 @@ jobs:
                   --token ${SONATYPE_API_KEY} \
                   --username ${SONATYPE_USERNAME}
 
-  - name: trivy-release
-    public: true # all logs are publicly visible
-    serial: true
-    plan:
-      - in_parallel:
-          - get: weekdays
-            trigger: true
-          - get: pinniped-latest-release-image
-            params:
-              format: oci
-          - get: pinniped-ci
-      - task: scan
-        file: pinniped-ci/pipelines/shared-tasks/scan-image-trivy/task.yml
-        params:
-          <<: *trivy_ignores
-        input_mapping:
-          image: pinniped-latest-release-image
-
-  - name: trivy-main
-    public: true # all logs are publicly visible
-    serial: true
-    plan:
-      - in_parallel:
-          - get: weekdays
-            trigger: true
-          - get: pinniped-latest-main-image
-            params:
-              format: oci
-          - get: pinniped-ci
-      - task: scan
-        file: pinniped-ci/pipelines/shared-tasks/scan-image-trivy/task.yml
-        params:
-          <<: *trivy_ignores
-        input_mapping:
-          image: pinniped-latest-main-image
+#  - name: trivy-release
+#    public: true # all logs are publicly visible
+#    serial: true
+#    plan:
+#      - in_parallel:
+#          - get: weekdays
+#            trigger: true
+#          - get: pinniped-latest-release-image
+#            params:
+#              format: oci
+#          - get: pinniped-ci
+#      - task: scan
+#        file: pinniped-ci/pipelines/shared-tasks/scan-image-trivy/task.yml
+#        params:
+#          <<: *trivy_ignores
+#        input_mapping:
+#          image: pinniped-latest-release-image
+#
+#  - name: trivy-main
+#    public: true # all logs are publicly visible
+#    serial: true
+#    plan:
+#      - in_parallel:
+#          - get: weekdays
+#            trigger: true
+#          - get: pinniped-latest-main-image
+#            params:
+#              format: oci
+#          - get: pinniped-ci
+#      - task: scan
+#        file: pinniped-ci/pipelines/shared-tasks/scan-image-trivy/task.yml
+#        params:
+#          <<: *trivy_ignores
+#        input_mapping:
+#          image: pinniped-latest-main-image
 
   - name: all-golang-deps-updated
     public: true # all logs are publicly visible