Clarify comment [no ci]

digitalservicebund · Dec 16, 2024 · 1f0cfa4 · 1f0cfa4
1 parent ea989d7
commit 1f0cfa4
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/security-jobs.yml b/.github/workflows/security-jobs.yml
@@ -34,9 +34,8 @@ jobs:
         with:
           SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
 
-      # TODO upload trivy to GitHub Security Tab
-      # we cannot upload the trivy results to the GitHub Security tab as we're neither a public repository
-      # nor an Enterprise level user who has access to GitHub "Advanced Security",
+      # we should be able to upload the trivy results to the GitHub Security tab as we're a public repositor
+      # but right now it's not worth it
       # cf https://digitalservicebund.atlassian.net/browse/RISDEV-5193
 
   secrets-scan-with-talisman: # scan for secrets that were published by mistake (we have a pre-commit and pre-push hook, but who knows)