From 362e2567216c2b99750c73149e8ee73cff3f7065 Mon Sep 17 00:00:00 2001
From: Calin Lupas <lupas_calin@yahoo.com>
Date: Mon, 21 Apr 2025 14:53:47 -0400
Subject: [PATCH] Refactor CI/CD workflow to disable Azure Web Apps deployment
 and remove redundant SBOM upload step

---
 .github/workflows/SCA-Anchore-Syft-SBOM.yml | 6 ++----
 .github/workflows/cicd.yml                  | 2 +-
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/SCA-Anchore-Syft-SBOM.yml b/.github/workflows/SCA-Anchore-Syft-SBOM.yml
index 57ec873..26a945c 100644
--- a/.github/workflows/SCA-Anchore-Syft-SBOM.yml
+++ b/.github/workflows/SCA-Anchore-Syft-SBOM.yml
@@ -33,9 +33,7 @@ jobs:
 
       - name: Scan the image and upload dependency results
         uses: anchore/sbom-action@bb716408e75840bbb01e839347cd213767269d4a
+        continue-on-error: true
         with:
           image: "${{ env.imageName }}:${{ env.tag }}"
-          dependency-snapshot: true
-      
-      - name: SBOM upload 
-        uses: advanced-security/spdx-dependency-submission-action@v0.1.1
+          dependency-snapshot: true
\ No newline at end of file
diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index e4e1d33..164d430 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -47,6 +47,7 @@ jobs:
             
       # Deploy to Azure Web apps
       - name: 'Run Azure webapp deploy action using publish profile credentials'
+        if: false  # This disables the action
         uses: azure/webapps-deploy@v3
         with: 
           app-name: ${{ env.AZURE_WEBAPP_NAME }} # Replace with your app name
@@ -62,7 +63,6 @@ jobs:
           docker push crdevsecopscldev.azurecr.io/webapp01:${{ github.sha }}     
     
       - name: Disabled Azure Web Apps Deploy
-        if: false  # This disables the action
         uses: azure/webapps-deploy@v2
         with:
           app-name: ${{ env.AZURE_WEBAPP_NAME }}