Delete dead workflows and update comment for dep-review workflow version

[jebeaudet]

J:FOUND-308

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/coveo/public-actions/.github/workflows/java-maven-openjdk-codeql.yml	main	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Dependency-Update-Tool 🟢 10 update tool detected Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Maintained 🟢 10 18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Pinned-Dependencies ⚠️ 7 dependency not pinned by hash detected -- score normalized to 7 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Vulnerabilities 🟢 10 0 existing vulnerabilities detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Branch-Protection ⚠️ 5 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 8 SAST tool detected but not run on all commits CI-Tests 🟢 10 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 Contributors ⚠️ 3 project has 1 contributing companies or organizations -- score normalized to 3
actions/coveo/public-actions/.github/workflows/java-maven-openjdk-dependency-submission.yml	main	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Dependency-Update-Tool 🟢 10 update tool detected Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Maintained 🟢 10 18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Pinned-Dependencies ⚠️ 7 dependency not pinned by hash detected -- score normalized to 7 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Vulnerabilities 🟢 10 0 existing vulnerabilities detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Branch-Protection ⚠️ 5 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 8 SAST tool detected but not run on all commits CI-Tests 🟢 10 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 Contributors ⚠️ 3 project has 1 contributing companies or organizations -- score normalized to 3

Scanned Manifest Files

.github/workflows/java-maven-openjdk11-codeql.yml

• coveo/public-actions/.github/workflows/java-maven-openjdk-codeql.yml@main

.github/workflows/java-maven-openjdk11-dependency-submission.yml

• coveo/public-actions/.github/workflows/java-maven-openjdk-dependency-submission.yml@main

[Copilot]

Copilot reviewed 1 out of 4 changed files in this pull request and generated no comments.

Files not reviewed (3)

• .github/workflows/java-maven-openjdk11-codeql.yml: Language not supported
• .github/workflows/java-maven-openjdk11-dependency-submission.yml: Language not supported
• CODEOWNERS: Language not supported