chore: remove orphaned report CSVs and empty workflow leftover (#63)
Deletes reports/ (22 CSVs, 1.1MB) and .github/workflows/old/license-cal-check.yml.
reports/ held the weekly output of dependency-scan.yml and
secrets-scanning-report.yml: 11 secret_report_*.csv and 11
vulnerability_report_*.csv, committed by bot vmwclabot2 between
2025-02-17 and 2025-04-28. Both producing workflows were archived to
workflows/old/ in #62, so nothing writes the folder anymore, and nothing
in any live path reads it. The data is ~16 months stale and describes a
security posture that has since changed. Git history preserves every file
if it is ever needed.
Note both workflows only ever *aggregated* GitHub's native security data
(/dependabot/alerts, /dependency-graph/sbom, /secret-scanning/alerts) into
CSVs — they never performed scanning themselves. Native Dependabot and
secret scanning have run uninterrupted throughout and are unaffected.
license-cal-check.yml was a 1-byte file containing a single newline, with
a typo'd name (cal/cla) and one commit in its entire history. It sat in
workflows/old/ so it was already disabled.
Live system untouched: both active workflows (cla_sweeper.yml,
required-compliance.yml) and all six live scripts are unchanged.
Co-authored-by: Amr AbuSair <amr.abusair@>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
0 commit comments