chore: move the DSGAI scanner to GenAI-Security-Project/dsgai

.github/CODEOWNERS

@@ -2,6 +2,3 @@
 # Docs: https://docs.github.com/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
 #
 # Owners are requested for review automatically when matching files change.
-
-# DSGAI scanner tool subproject
-/dsgai_scanner_tool/ @emmanuelgjr

.github/ISSUE_TEMPLATE/config.yml

@@ -1,10 +1,15 @@
 blank_issues_enabled: true
 contact_links:
+  - name: DSGAI Scanner issues
+    url: https://github.com/GenAI-Security-Project/dsgai/issues
+    about: >-
+      The DSGAI scanner now lives in its own repository. File bugs, false positives,
+      false negatives, and rule proposals there.
   # TODO(maintainer): replace the OWASP Slack invite URL below with the direct
   # invite link to the initiative's channel (e.g. #genai-data-security) once known.
   - name: OWASP GenAI Slack (DSGAI scanner discussion)
     url: https://owasp.org/slack/invite
     about: >-
       Questions, scan reports, or general discussion? Join the OWASP Slack and find
       the GenAI Data Security Initiative channel. For wrong scanner results, please
-      still file a [scanner] false-positive / false-negative issue so it becomes a test case.
+      still file a false-positive / false-negative issue in the dsgai repo so it becomes a test case.

.github/dependabot.yml

@@ -40,37 +40,6 @@
           patterns:
             - "*"
 
-    # ----- Python dev deps for the DSGAI scanner (requirements-dev.txt) -----
-    - package-ecosystem: "pip"
-      directory: "/dsgai_scanner_tool"
-      schedule:
-        interval: "weekly"
-        day: "monday"
-        time: "06:00"
-        timezone: "Etc/UTC"
-      open-pull-requests-limit: 10
-      versioning-strategy: "increase-if-necessary"
-      labels:
-        - "dependencies"
-        - "python"
-        - "security"
-        - "scanner"
-      commit-message:
-        prefix: "deps"
-        prefix-development: "deps-dev"
-        include: "scope"
-      groups:
-        python-minor-and-patch:
-          applies-to: version-updates
-          update-types: ["minor", "patch"]
-        python-security:
-          applies-to: security-updates
-          patterns: ["*"]
-      ignore:
-        # Block silent major bumps; require explicit review.
-        - dependency-name: "*"
-          update-types: ["version-update:semver-major"]
-
     # ----- Uncomment if/when a Dockerfile is added -----
     # - package-ecosystem: "docker"
     #   directory: "/"

.github/workflows/dataset-agentdataflow-validate.yml

@@ -3,7 +3,7 @@ name: dataset-agentdataflow-validate
 # Runs the dataset-local validator for agentdataflow_toolexchange_traces on
 # every change to it, so "enforced by validate.py" in that dataset's README
 # is true of the merged tree and not only of whoever remembered to run it
-# locally. Path-filtered to the dataset, same pattern as scanner-selftest.
+# locally. Path-filtered to the dataset.
 on:
   push:
     branches: [main]