From ebd0ed9e37804d983c772ac45316d1da6b9d02f6 Mon Sep 17 00:00:00 2001
From: libops-agent <115990865+libops-agent@users.noreply.github.com>
Date: Wed, 2 Sep 2026 09:50:34 +0000
Subject: [PATCH] [patch] Remove Trivy image scanning

---
 .github/workflows/lint-test-build.yml | 1 -
 ci/workflow_contract_test.go          | 1 -
 2 files changed, 2 deletions(-)

diff --git a/.github/workflows/lint-test-build.yml b/.github/workflows/lint-test-build.yml
index 6f213a6..b70a3b6 100644
--- a/.github/workflows/lint-test-build.yml
+++ b/.github/workflows/lint-test-build.yml
@@ -65,7 +65,6 @@ jobs:
       ref: ${{ github.sha }}
       expected-main-sha: ${{ github.ref == 'refs/heads/main' && github.sha || '' }}
       additional-gar-registry: us-docker.pkg.dev/libops-images/public
-      scan: true
       sign: true
     permissions:
       contents: read
diff --git a/ci/workflow_contract_test.go b/ci/workflow_contract_test.go
index c27d42a..57ccbce 100644
--- a/ci/workflow_contract_test.go
+++ b/ci/workflow_contract_test.go
@@ -33,7 +33,6 @@ func TestImagePublicationUsesGuardedSharedContract(t *testing.T) {
 		"libops/.github/.github/workflows/build-push.yaml@main",
 		"additional-gar-registry: us-docker.pkg.dev/libops-images/public",
 		"expected-main-sha:",
-		"scan: true",
 		"sign: true",
 		"GCLOUD_OIDC_POOL: ${{ secrets.GCLOUD_OIDC_POOL }}",
 		"GSA: ${{ secrets.GSA }}",