build(ci): use starflow for policy and security scans
Metadata
Current evaluation
Merged update to the CI pipeline using starflow for policy and security scans. Approved by two reviewers, rebased on main, and reduced code by 12 lines across four files.
Suggested action: —
No scores available.
Issue body
CRAFT-3707
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged update to the CI pipeline using starflow for policy and security scans. Approved by two reviewers, rebased on main, and reduced code by 12 lines across four files. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to main after rebasing, updating the CI pipeline to use starflow for policy and security scans. Resolves CRAFT-3707. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged CI configuration update to integrate Starflow for policy and security scans. The branch was rebased onto main and successfully integrated, resolving CRAFT-3707. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #573 ci: update usage of starflow security scanner | starbase | merged | Merged after two approvals and passing CI. Updated the python-scans job in policy.yaml to use new starflow security scanner options, adding an osv-scanner.toml placeholder and path exclusions. | |
| #622 build: switch to starflow | craft-application | merged | Merged. The build system was switched to starflow after two approvals. Mandatory CI checks were updated to specific lint and test jobs, the branch was rebased, and the changes were merged. | |
| #2015 build: use starflow | charmcraft | merged | Merged the build system update to use starflow. Approved by two reviewers, the change modifies 22 files. Final review noted pending spread test fixes, but the PR was successfully merged. | |
| #260 ci: use starflow renovate config | starbase | merged | Merged the starflow renovate configuration update, removing 220 lines of CI setup across two files. Approved by two reviewers and successfully integrated. | |
| #1915 ci: add security scans | charmcraft | closed | Closed without merging. The CI security scanning changes are being redirected to the canonical/starflow repository. A separate pull request will implement the updated starflow version instead. | |
| #861 ci: use starflow policy checker | craft-parts | closed | Closed without merging. The pull request to update CI to use the starflow policy checker was abandoned due to zero reviewer engagement, missing CI validation, and no subsequent activity. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed. | |
| #272 ci: use starflow CI actions | starbase | merged | Merged after three reviewers approved and CI passed. The update switches the CI pipeline to starflow actions, resolves CRAFT-3603, and adds upstream dependencies. All review feedback was addressed before integration. | |
| #5225 refactor: migrate to starflow | snapcraft | merged | Merged a large refactor migrating the codebase to starflow across 173 files. CI failures were dismissed as pre-existing flaky tests, unrelated security checks, and legacy commit formatting. Rebased on main before merge. | |
| #71 fix(ci): use main branch from starflow | imagecraft | merged | Merged a fix updating the CI configuration to use the main branch from starflow. The change modified two files with two additions and two deletions. |