From cbb88bd453de3e9d13a5979d656d9a21f414a274 Mon Sep 17 00:00:00 2001
From: Renaud Calle <renaud.calle@outscale.com>
Date: Mon, 13 Jul 2026 12:23:59 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20ci:=20Add=20compliance=20workflo?=
 =?UTF-8?q?w=20and=20remove=20obsolete?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/compliance.yml         | 22 ++++++++++++++++++++++
 .github/workflows/cred-scan.yml          | 15 ---------------
 .github/workflows/github-sanity-scan.yml | 15 ---------------
 3 files changed, 22 insertions(+), 30 deletions(-)
 create mode 100644 .github/workflows/compliance.yml
 delete mode 100644 .github/workflows/cred-scan.yml
 delete mode 100644 .github/workflows/github-sanity-scan.yml

diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml
new file mode 100644
index 0000000..011f706
--- /dev/null
+++ b/.github/workflows/compliance.yml
@@ -0,0 +1,22 @@
+name: Compliance
+
+on:
+  pull_request:
+    branches: [ main, master ]
+
+permissions:
+  contents: read
+
+jobs:
+  compliance:
+    runs-on: ubuntu-latest
+    steps:
+    - name: ⬇️ Checkout
+      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      with:
+        persist-credentials: false
+    - name: Plumber
+      uses: outscale/.github/pipeline-compliance@2cbbe00ba9835f42809be7511fe7dba5a0dc0c15 # v1.0.0
+      with:
+        plumber-threshold: 100
+        github-token: ${{ secrets.PLUMBER_TOKEN }}
diff --git a/.github/workflows/cred-scan.yml b/.github/workflows/cred-scan.yml
deleted file mode 100644
index e019f69..0000000
--- a/.github/workflows/cred-scan.yml
+++ /dev/null
@@ -1,15 +0,0 @@
-name: Credential Scanner
-
-on:
-  pull_request:
-    branches: [ master ]
-
-jobs:
-  cred-scan:
-    runs-on: ubuntu-20.04
-    steps:
-    - uses: actions/checkout@v2
-    - name: Scan credentials
-      uses: outscale-dev/cred-scan@main
-      with:
-        scan_path: "./"
diff --git a/.github/workflows/github-sanity-scan.yml b/.github/workflows/github-sanity-scan.yml
deleted file mode 100644
index b9ce0c8..0000000
--- a/.github/workflows/github-sanity-scan.yml
+++ /dev/null
@@ -1,15 +0,0 @@
-name: Github sanity scanner
-
-on:
-  pull_request:
-    branches: [ master ]
-
-jobs:
-  github-sanity-scan:
-    runs-on: ubuntu-20.04
-    steps:
-    - uses: actions/checkout@v2
-    - name: Github sanity scanner
-      uses: outscale/github-sanity-scan@main
-      with:
-        no-pull-request-target: true