From ccda2fbe44dd3c6666507c90fa7039b1f194fe9f Mon Sep 17 00:00:00 2001
From: diegosouzapw <diegosouzapw@users.noreply.github.com>
Date: Mon, 27 Apr 2026 11:59:09 -0300
Subject: [PATCH] ci: remove expired advanced security scans job

---
 .github/workflows/ci.yml | 42 ++--------------------------------------
 1 file changed, 2 insertions(+), 40 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1c5b6bf15b..dc1d2b24a2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -100,44 +100,6 @@ jobs:
             cat .artifacts/pr-test-policy.md >> "$GITHUB_STEP_SUMMARY"
           fi
 
-  advanced-security:
-    name: Advanced Security Scans
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@main
-        with:
-          path: ./
-          base: ${{ github.event.before || github.event.repository.default_branch }}
-          head: HEAD
-          extra_args: --only-verified
-
-      - uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.CI_NODE_VERSION }}
-          cache: npm
-
-      - run: npm ci
-      - run: npm run check:node-runtime
-
-      - name: Dependency audit
-        run: npm audit --audit-level=high --omit=dev
-
-      - name: Check for known vulnerabilities
-        run: npx is-my-node-vulnerable
-
-      - name: Run Snyk Vulnerability checks
-        if: github.actor != 'dependabot[bot]'
-        uses: snyk/actions/node@master
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-        with:
-          args: --severity-threshold=high
-
   build:
     name: Build
     runs-on: ubuntu-latest
@@ -471,7 +433,7 @@ jobs:
       - lint
       - i18n
       - pr-test-policy
-      - advanced-security
+
       - build
       - package-artifact
       - electron-package-smoke
@@ -514,7 +476,7 @@ jobs:
           echo "|-----|--------|" >> "$GITHUB_STEP_SUMMARY"
           echo "| Lint | $(status '${{ needs.lint.result }}') |" >> "$GITHUB_STEP_SUMMARY"
           echo "| PR Test Policy | $(status '${{ needs.pr-test-policy.result }}') |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Advanced Security | $(status '${{ needs.advanced-security.result }}') |" >> "$GITHUB_STEP_SUMMARY"
+
           echo "| SonarQube | $(status '${{ needs.sonarqube.result }}') |" >> "$GITHUB_STEP_SUMMARY"
 
           echo "" >> "$GITHUB_STEP_SUMMARY"