From 7e0bc22296cda0676173ad06d478e79d6dac1b79 Mon Sep 17 00:00:00 2001
From: Arunav Gandhi <arunav.gandhi@okta.com>
Date: Tue, 29 Sep 2026 13:20:25 +0530
Subject: [PATCH] Add Snyk SCA dependency scanning workflow

- Add .github/workflows/sca_scan.yml using auth0/devsecops-tooling reusable workflow
- Remove dead bintray plugin from build.gradle (Bintray shutdown in 2021,
  http-builder:0.7.2 no longer resolvable, was breaking IDE sync and Snyk scan)
---
 .github/workflows/sca_scan.yml | 13 +++++++++++++
 build.gradle                   |  2 --
 2 files changed, 13 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/sca_scan.yml

diff --git a/.github/workflows/sca_scan.yml b/.github/workflows/sca_scan.yml
new file mode 100644
index 0000000..4ad0bed
--- /dev/null
+++ b/.github/workflows/sca_scan.yml
@@ -0,0 +1,13 @@
+name: SCA
+
+on:
+  push:
+    branches: [ "master", "main", "**" ]
+
+jobs:
+  snyk-cli:
+    uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main
+    with:
+      java-version: "17"
+      pre-scan-commands: "./gradlew dependencies --no-daemon --console=plain"
+    secrets: inherit
\ No newline at end of file
diff --git a/build.gradle b/build.gradle
index 25ca688..5552b71 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,6 +1,5 @@
 group = 'com.auth0'
 
-apply plugin: "com.jfrog.bintray"
 apply plugin: "com.auth0.gradle.oss-library.java"
 apply plugin: "jacoco"
 
@@ -43,7 +42,6 @@ buildscript {
         }
     }
     dependencies {
-        classpath 'com.jfrog.bintray.gradle:gradle-bintray-plugin:1.8.4'
         classpath "gradle.plugin.com.auth0.gradle:oss-library:0.9.0"
     }
 }