BAH-5026 | Drop the weekly cron from the Semgrep workflow

[vishalkarmalkarthoughtworks]

Removes the schedule: trigger from .github/workflows/semgrep.yml. Two lines, no other change.

Why

GitHub disables a scheduled workflow in a public repo after 60 days with no repository activity. Two details matter:

1. The disable applies to the whole workflow, not just the cron. pull_request and push stop firing too, so Semgrep stops running on every PR.
2. GitHub never re-enables it. Activity resuming does not undo it.

This already happened to two repos from this rollout. semgrep.yml was in state disabled_inactivity on Bahmni/bahmni-api-test-automation and Bahmni/openmrs-module-bedmanagement, so Semgrep had stopped running on their PRs entirely. Both have been re-enabled, and they would trip again in another 60 dormant days with the cron still in place.

What is unaffected

• Scanning on every pull request, and on push to the default branch. This is where the coverage comes from.
• workflow_dispatch, so an on-demand full scan is still one click in the Actions tab.

Diff

 on:
   pull_request:
   push:
     branches: [main, master]
-  schedule:
-    - cron: '24 13 * * 1'
   workflow_dispatch:

Ticket: https://bahmni.atlassian.net/browse/BAH-5026

[coderabbitai]

Warning

Review limit reached

Next included review available in 48 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9f9000e0-48db-4eae-8337-4108c5d2a305

📥 Commits

Reviewing files that changed from the base of the PR and between b5d30b2 and 56c37ae.

📒 Files selected for processing (1)

• .github/workflows/semgrep.yml

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud