fix(security): disable semgrep/semgrep container — Critical/High CVEs, no upstream fix available

.github/aw/actions-lock.json

@@ -274,11 +274,6 @@
       "image": "python:alpine",
       "digest": "sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92",
       "pinned_image": "python:alpine@sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92"
-    },
-    "semgrep/semgrep:latest": {
-      "image": "semgrep/semgrep:latest",
-      "digest": "sha256:bdf7013b2c3634a487671158da77c554f531742326b543a9464d2adf6c433ac8",
-      "pinned_image": "semgrep/semgrep:latest@sha256:bdf7013b2c3634a487671158da77c554f531742326b543a9464d2adf6c433ac8"
     }
   }
 }

.github/workflows/daily-semgrep-scan.md

@@ -7,8 +7,9 @@ imports:
   - shared/security-analysis-base.md
   - shared/mcp/semgrep.md
   - shared/otlp.md
+# SECURITY: Daily schedule disabled — semgrep/semgrep has Critical/High CVEs with no upstream fix (issue #49520).
+# Re-enable schedule when a patched semgrep image is available and the container definition in shared/mcp/semgrep.md is restored.
 on:
-  schedule: daily
   workflow_dispatch:
 timeout-minutes: 30
 permissions:

.github/workflows/shared/mcp/semgrep.md

@@ -1,12 +1,14 @@
 ---
 # Semgrep MCP Server
-# Container-based MCP server for static analysis and security scanning
+# SECURITY: semgrep/semgrep has Critical/High CVEs with no upstream fix available (issue #49520).
+# The container definition has been removed until a patched image is published upstream.
+# To re-enable, restore the mcp-servers block and update the pinned digest in actions-lock.json.
 #
 # Documentation: https://semgrep.dev/
 # MCP Server: https://github.com/semgrep/semgrep
 # Docker Image: https://hub.docker.com/r/semgrep/semgrep
 #
-# Available tools:
+# Available tools (when enabled):
 #   - semgrep_rule_schema: Get the schema for writing Semgrep rules
 #   - get_supported_languages: List languages supported by Semgrep
 #   - semgrep_scan: Scan code files for security vulnerabilities and bugs
@@ -17,22 +19,6 @@
 # Usage:
 #   imports:
 #     - shared/mcp/semgrep.md
-
-mcp-servers:
-  semgrep:
-    container: "semgrep/semgrep"
-    version: "latest"
-    entrypointArgs: ["semgrep", "mcp", "-t", "stdio"]
-    env:
-      SEMGREP_SEND_METRICS: "off"
-    # Security decision (2026-05-19): explicit Semgrep tool allowlist (no wildcard).
-    allowed:
-      - semgrep_rule_schema
-      - get_supported_languages
-      - semgrep_scan
-      - semgrep_scan_local
-      - semgrep_scan_with_custom_rule
-      - semgrep_findings
 ---
 
 <!--

pkg/actionpins/data/action_pins.json

@@ -274,11 +274,6 @@
       "image": "python:alpine",
       "digest": "sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92",
       "pinned_image": "python:alpine@sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92"
-    },
-    "semgrep/semgrep:latest": {
-      "image": "semgrep/semgrep:latest",
-      "digest": "sha256:bdf7013b2c3634a487671158da77c554f531742326b543a9464d2adf6c433ac8",
-      "pinned_image": "semgrep/semgrep:latest@sha256:bdf7013b2c3634a487671158da77c554f531742326b543a9464d2adf6c433ac8"
     }
   }
 }

pkg/workflow/data/action_pins.json

@@ -274,11 +274,6 @@
       "image": "python:alpine",
       "digest": "sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92",
       "pinned_image": "python:alpine@sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92"
-    },
-    "semgrep/semgrep:latest": {
-      "image": "semgrep/semgrep:latest",
-      "digest": "sha256:bdf7013b2c3634a487671158da77c554f531742326b543a9464d2adf6c433ac8",
-      "pinned_image": "semgrep/semgrep:latest@sha256:bdf7013b2c3634a487671158da77c554f531742326b543a9464d2adf6c433ac8"
     }
   }
 }