Disable dependency check and sonar workflows (#10442)

Temporarily disable dependency check and sonar workflows until they work again --------- Signed-off-by: Steven Sheehy <[email protected]>
hiero-ledger · Feb 20, 2025 · 2fa2d71 · 2fa2d71
1 parent 80fbaf7
commit 2fa2d71
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -25,7 +25,7 @@ jobs:
   dependencies:
     name: Dependency Check
     runs-on: hiero-mirror-node-linux-large
-    if: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository }}
+    if: false # ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository }}
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
@@ -61,6 +61,7 @@ jobs:
         env:
           NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
         run: ./gradlew dependencyCheckAggregate
+        timeout-minutes: 20
 
       - name: Upload report
         uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
@@ -107,7 +108,7 @@ jobs:
           args: ./...
 
   sonar:
-    if: github.event_name == 'push' || (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]')
+    if: false # github.event_name == 'push' || (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]')
     name: SonarCloud
     runs-on: hiero-mirror-node-linux-large
     steps:
@@ -147,6 +148,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
         run: ./gradlew build sonar -x test
+        timeout-minutes: 10
 
   snyk:
     if: github.event_name == 'push' || (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]')