ci: remove Snyk scan and monitor

.github/workflows/flow-build-application.yaml

@@ -1,5 +1,5 @@
 ##
-# Copyright (C) 2022-2023 Hedera Hashgraph, LLC
+# Copyright (C) 2022-2026 Hedera Hashgraph, LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -33,11 +33,6 @@ on:
         type: boolean
         required: false
         default: false
-      enable-snyk-scan:
-        description: "Snyk Scan Enabled"
-        type: boolean
-        required: false
-        default: false
       java-version:
         description: "Java JDK Version:"
         type: string
@@ -87,12 +82,10 @@ jobs:
       java-version: ${{ github.event.inputs.java-version || '21.0.1' }}
       java-distribution: ${{ github.event.inputs.java-distribution || 'temurin' }}
       gradle-version: ${{ github.event.inputs.gradle-version || 'wrapper' }}
-      enable-snyk-scan: ${{ github.event_name == 'push' || github.event.inputs.enable-snyk-scan == 'true' }}
       enable-sonar-analysis: ${{ github.event_name == 'push' || github.event.inputs.enable-sonar-analysis == 'true' }}
       enable-codecov-analysis: ${{ github.event_name == 'push' || github.event.inputs.enable-unit-tests == 'true' }}
     secrets:
       gradle-cache-username: ${{ secrets.GRADLE_CACHE_USERNAME }}
       gradle-cache-password: ${{ secrets.GRADLE_CACHE_PASSWORD }}
       sonar-token: ${{ secrets.SONAR_TOKEN }}
-      snyk-token: ${{ secrets.SNYK_TOKEN }}
       codecov-token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/flow-pull-request-checks.yaml

@@ -1,5 +1,5 @@
 ##
-# Copyright (C) 2023-2024 Hedera Hashgraph, LLC
+# Copyright (C) 2023-2026 Hedera Hashgraph, LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -86,17 +86,3 @@ jobs:
       gradle-cache-username: ${{ secrets.GRADLE_CACHE_USERNAME }}
       gradle-cache-password: ${{ secrets.GRADLE_CACHE_PASSWORD }}
       sonar-token: ${{ secrets.SONAR_TOKEN }}
-
-  snyk:
-    name: Snyk Scan
-    uses: ./.github/workflows/zxc-code-analysis.yaml
-    needs:
-      - unit-tests
-    if: ${{ github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name && github.actor != 'dependabot[bot]' }}
-    with:
-      custom-job-label: Standard
-      enable-snyk-scan: true
-    secrets:
-      gradle-cache-username: ${{ secrets.GRADLE_CACHE_USERNAME }}
-      gradle-cache-password: ${{ secrets.GRADLE_CACHE_PASSWORD }}
-      snyk-token: ${{ secrets.SNYK_TOKEN }}

.github/workflows/zxc-code-analysis.yaml

@@ -35,11 +35,6 @@ on:
         type: boolean
         required: false
         default: false
-      enable-snyk-scan:
-        description: "Snyk Scan Enabled"
-        type: boolean
-        required: false
-        default: false
       java-distribution:
         description: "Java JDK Distribution:"
         type: string
@@ -75,9 +70,6 @@ on:
       sonar-token:
         description: "The SonarCloud access token used by the SonarQube agent to report an analysis."
         required: false
-      snyk-token:
-        description: "The Snyk access token is used by Snyk to analyze the code for vulnerabilities "
-        required: false
       codecov-token:
         description: "The CodeCov access token is used by CodeCov.io to analyze the code coverage "
         required: false
@@ -124,7 +116,7 @@ jobs:
         with:
           gradle-version: ${{ inputs.gradle-version }}
 
-      # Node.JS 16.x is required for the Snyk CLI, Sonar Scan, and CodeCov steps below.
+      # Node.JS 16.x is required for the Sonar Scan and CodeCov steps below.
       - name: Setup Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
@@ -171,60 +163,3 @@ jobs:
         with:
           gradle-version: ${{ inputs.gradle-version }}
           arguments: sonar --info --scan ${{ steps.sonar-cloud.outputs.options }}
-
-      - name: Setup Snyk
-        env:
-          SNYK_TOKEN: ${{ secrets.snyk-token }}
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && !failure() }}
-        run: npm install -g snyk snyk-to-html @wcj/html-to-markdown-cli
-
-      - name: Snyk Scan
-        id: snyk
-        env:
-          SNYK_TOKEN: ${{ secrets.snyk-token }}
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && !failure() }}
-        run: snyk test --all-projects --severity-threshold=high --json-file-output=snyk-test.json
-
-      - name: Snyk Code
-        id: snyk-code
-        env:
-          SNYK_TOKEN: ${{ secrets.snyk-token }}
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && !failure() }}
-        run: snyk code test --severity-threshold=high --json-file-output=snyk-code.json
-
-      - name: Publish Snyk Results
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && !failure() }}
-        run: |
-          if [[ -f "snyk-test.json" && -n "$(cat snyk-test.json | tr -d '[:space:]')" ]]; then
-            snyk-to-html -i snyk-test.json -o snyk-test.html --summary
-            html-to-markdown snyk-test.html -o snyk
-            cat snyk/snyk-test.html.md >> $GITHUB_STEP_SUMMARY
-          fi
-
-          if [[ -f "snyk-code.json" && -n "$(cat snyk-code.json | tr -d '[:space:]')" ]]; then
-            snyk-to-html -i snyk-code.json -o snyk-code.html --summary
-            html-to-markdown snyk-code.html -o snyk
-            cat snyk/snyk-code.html.md >> $GITHUB_STEP_SUMMARY
-          fi
-
-      - name: Check Snyk Files
-        if: ${{ always() }}
-        run: |
-          echo "::group::Snyk File List"
-            ls -lah snyk* || true
-          echo "::endgroup::"
-          echo "::group::Snyk Test Contents"
-            cat snyk-test.json || true
-          echo "::endgroup::"
-          echo "::group::Snyk Code Contents"
-            cat snyk-code.json || true
-          echo "::endgroup::"
-
-      - name: Publish Snyk Reports
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && !failure() }}
-        with:
-          name: Snyk Reports
-          path: |
-            snyk-*.html
-            snyk-*.json

build-logic/project-plugins/src/main/kotlin/com.hedera.fullstack.conventions.gradle.kts

@@ -31,8 +31,7 @@ plugins {
 }
 
 repositories {
-    // Source Maven Central Artifacts from JFrog Artifactory
-    maven { url = uri("https://artifacts.swirldslabs.io/artifactory/central-maven-external/") }
+    mavenCentral()
 }
 
 // Configure the JVM build environment

build-logic/project-plugins/src/main/kotlin/com.hedera.fullstack.spotless-conventions.gradle.kts

@@ -22,9 +22,6 @@ spotless {
     // Disable the automatic application of Spotless to all source sets when the check task is run.
     isEnforceCheck = false
 
-    // optional: limit format enforcement to just the files changed by this feature branch
-    ratchetFrom("origin/main")
-
     format("misc") {
         // define the files to apply `misc` to
         target("*.gradle", "*.md", ".gitignore")

build.gradle.kts

@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2023 Hedera Hashgraph, LLC
+ * Copyright (C) 2023-2026 Hedera Hashgraph, LLC
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -17,7 +17,6 @@
 plugins { id("com.hedera.fullstack.root") }
 
 repositories {
-    // Source Maven Central Artifacts from JFrog Artifactory
-    maven { url = uri("https://artifacts.swirldslabs.io/artifactory/central-maven-external/") }
+    mavenCentral()
     gradlePluginPortal()
 }

settings.gradle.kts

@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2023-2024 Hedera Hashgraph, LLC
+ * Copyright (C) 2023-2026 Hedera Hashgraph, LLC
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.