From 16332020f805cb75cc9b68b90b4f9d5725b90cfd Mon Sep 17 00:00:00 2001
From: geoffg-sentry <165922362+geoffg-sentry@users.noreply.github.com>
Date: Fri, 23 May 2025 16:33:00 -0400
Subject: [PATCH] Update secret-scan.yml

Panther is dead, long live new siem
---
 .github/workflows/secret-scan.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index e10c7e8..3ce1739 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -64,11 +64,6 @@ jobs:
       - name: Send Alert to SIEM
         id: alert
         run: |
-          if [[ -n "${{vars.SECRET_SCAN_PANTHER_WEBHOOK_URL}}" ]]; then
-            curl "${{vars.SECRET_SCAN_PANTHER_WEBHOOK_URL}}" \
-              --header "Authorization: Bearer ${{ secrets.SECRET_SCAN_PANTHER_WEBHOOK_HEADER }}" \
-              --data '{"event":"github_secret_scanning", "status":"${{steps.scan.outcome}}", "createdAt":"${{ github.event.pull_request.created_at }}", "repo":"${{ github.repository }}","pull_request":"https://github.com/${{ github.repository }}/pull/${{ github.event.pull_request.number }}","actor":"${{ github.event.pull_request.user.login }}"}'
-          fi
           if [[ -n "${{vars.SECRET_SCAN_SIEM_WEBHOOK_URL}}" ]]; then
             curl "${{vars.SECRET_SCAN_SIEM_WEBHOOK_URL}}" \
               --data '{"event":"github_secret_scanning", "status":"${{steps.scan.outcome}}", "createdAt":"${{ github.event.pull_request.created_at }}", "repo":"${{ github.repository }}","pull_request":"https://github.com/${{ github.repository }}/pull/${{ github.event.pull_request.number }}","actor":"${{ github.event.pull_request.user.login }}"}'