From 5f385d903d5c30b50dfadb39c6f56320928bad51 Mon Sep 17 00:00:00 2001
From: "Tobias.Mikula" <tobias.mikula@absa.africa>
Date: Tue, 28 Jul 2026 13:11:47 +0200
Subject: [PATCH 1/2] feat(sec): Adopting AquaSec Nigh scan solution

---
 .github/workflows/aquasec-night-scan.yml | 36 ++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 .github/workflows/aquasec-night-scan.yml

diff --git a/.github/workflows/aquasec-night-scan.yml b/.github/workflows/aquasec-night-scan.yml
new file mode 100644
index 0000000..c5d9482
--- /dev/null
+++ b/.github/workflows/aquasec-night-scan.yml
@@ -0,0 +1,36 @@
+name: AquaSec Night Scan
+
+on:
+  schedule:
+    - cron: '45 2 * * *'
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: Enable Dry Run mode
+        required: false
+        type: boolean
+        default: false
+
+concurrency:
+  group: aquasec-night-scan-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  actions: read
+  issues: write
+
+jobs:
+  aquasec-night-scan:
+    uses: AbsaOSS/organizational-workflows/.github/workflows/aquasec-scan.yml@3b6a6b035bc2ddd0b0f2a8f8854df19314474312
+    with:
+      dry-run: ${{ inputs.dry-run || false }}
+      min-severity: 'high'
+      project-number: 193
+      project-org: 'absa-group'
+    secrets:
+      AQUA_KEY: ${{ secrets.AQUA_KEY }}
+      AQUA_SECRET: ${{ secrets.AQUA_SECRET }}
+      AQUA_GROUP_ID: ${{ secrets.AQUA_GROUP_ID }}
+      AQUA_REPOSITORY_ID: ${{ secrets.AQUA_REPOSITORY_ID }}
+      TEAMS_WEBHOOK_URL: ${{ secrets.TEAMS_WEBHOOK_URL }}

From a20a30f65bd1a7c318e6a76adb3b5706e7b12da6 Mon Sep 17 00:00:00 2001
From: "Tobias.Mikula" <tobias.mikula@absa.africa>
Date: Tue, 28 Jul 2026 16:05:04 +0200
Subject: [PATCH 2/2] Update of release_draft.yml with new AquaSec section.

---
 .github/workflows/release_draft.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release_draft.yml b/.github/workflows/release_draft.yml
index 92ca90b..8c712a2 100644
--- a/.github/workflows/release_draft.yml
+++ b/.github/workflows/release_draft.yml
@@ -69,6 +69,9 @@ jobs:
           print-empty-chapters: false
           row-format-issue: '{type}: {number} _{title}_ by {developers} in {pull-requests}'
           row-format-pr: '{number} _{title}_ by {developers}'
+          service-chapter-exclude: |
+            Closed Issues without Pull Request ⚠️:
+              - [scope:security, type:tech-debt]
 
       - name: Create and push tag
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3