From 553befd1a5b678c450edb0c5a8e50ddd717376da Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Fri, 25 Sep 2026 16:29:52 -0600
Subject: [PATCH] ci: route trivy findings to jira

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .trivy.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.trivy.yaml b/.trivy.yaml
index f4adefd..276588d 100644
--- a/.trivy.yaml
+++ b/.trivy.yaml
@@ -24,9 +24,10 @@ scan:
   disable-telemetry: true
   offline: true
   scanners:
-    - vuln
+    # - vuln # keep disabled so not checked on PRs but explicitly via scheduled .github/workflows/pre-commit-cache.yaml
     - secret
     - misconfig
+    - license # while enabled but run via the separate 'trivy-license' action
   skip-dirs: ["**/.terraform/**", "**/.terragrunt-cache/**", "**/node_modules/**", "**/.local-scratch/**"]
   show-suppressed: true