From 033b05829cae4392228093a69afa6037901269ce Mon Sep 17 00:00:00 2001
From: Hugo Hills <hugo.hills@regnosys.com>
Date: Fri, 18 Sep 2026 10:22:52 +0100
Subject: [PATCH] Comment out push/PR triggers - CVE failures surface via the
 scheduled scan

---
 .github/workflows/cve-scanning.yml | 27 +++++++++++++++------------
 1 file changed, 15 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/cve-scanning.yml b/.github/workflows/cve-scanning.yml
index 2fe6f8bb..82d9be08 100644
--- a/.github/workflows/cve-scanning.yml
+++ b/.github/workflows/cve-scanning.yml
@@ -7,18 +7,21 @@ on:
         description: 'Set by the CVE Scanning Schedule workflow when dispatching this on a schedule (enables Slack notifications).'
         type: boolean
         default: false
-  push:
-    branches:
-      - master
-    paths:
-      - 'pom.xml'
-      - 'CVE-suppressions.xml'
-      - '.github/workflows/cve-scanning.yml'
-  pull_request:
-    paths:
-      - 'pom.xml'
-      - 'CVE-suppressions.xml'
-      - '.github/workflows/cve-scanning.yml'
+  # Disabled: CVE failures should surface via the scheduled scan
+  # (cve-scanning-schedule.yml), not on every pom.xml bump. Uncomment to
+  # re-enable push/PR triggering.
+  # push:
+  #   branches:
+  #     - master
+  #   paths:
+  #     - 'pom.xml'
+  #     - 'CVE-suppressions.xml'
+  #     - '.github/workflows/cve-scanning.yml'
+  # pull_request:
+  #   paths:
+  #     - 'pom.xml'
+  #     - 'CVE-suppressions.xml'
+  #     - '.github/workflows/cve-scanning.yml'
 
 # Cancel previous jobs
 concurrency: