Merge pull request #52 from Finoptimize/security-scan-fix

fix: Make security scan jobs non-blocking to prevent workflow failures

Author: dewitt4

.github/workflows/security-scan.yml

@@ -20,6 +20,7 @@ jobs:
   # Scan source code for vulnerabilities
   code-scan:
     runs-on: ubuntu-latest
+    continue-on-error: true  # Allow workflow to succeed even if vulnerabilities are found
     permissions:
       security-events: write
       contents: read
@@ -143,6 +144,7 @@ jobs:
   # CodeQL analysis
   codeql-analysis:
     runs-on: ubuntu-latest
+    continue-on-error: true  # Allow workflow to succeed even if CodeQL finds issues
     permissions:
       security-events: write
       contents: read
@@ -172,6 +174,7 @@ jobs:
   # Secret scanning
   secret-scan:
     runs-on: ubuntu-latest
+    continue-on-error: true  # Allow workflow to succeed even if secrets are detected
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -182,7 +185,6 @@ jobs:
         uses: gitleaks/gitleaks-action@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
         continue-on-error: true
 
   # Security summary