build(ci): use starflow for policy and security scans
Metadata
Current evaluation
Merged PR #2027 as ad40ba4d (implementation bdc9a0a1), switching CI policy and security scans to Starflow after two approvals and a rebase onto main.
Resolution: closed resolved
Reason: PR #2027 was merged into main as ad40ba4d, with the change committed in bdc9a0a1 and approved by two reviewers.
Evaluated by: mr-cal-bot
No scores available.
Issue body
CRAFT-3707
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #2027 as ad40ba4d (implementation bdc9a0a1), switching CI policy and security scans to Starflow after two approvals and a rebase onto main. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged charmcraft PR #2027, switching CI policy and security scans to Starflow after two approvals and a rebase onto main. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged into main after two approvals, adopting starflow for CI policy and security scans in canonical/charmcraft#2027; rebased on main. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #2027 (CRAFT-3707), replacing Charmcraft’s CI policy and security scans with starflow after two approvals and a rebase onto main. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged update to the CI pipeline using starflow for policy and security scans. Approved by two reviewers, rebased on main, and reduced code by 12 lines across four files. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to main after rebasing, updating the CI pipeline to use starflow for policy and security scans. Resolves CRAFT-3707. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #573 ci: update usage of starflow security scanner | starbase | merged | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). | |
| #1915 ci: add security scans | charmcraft | closed | Closed unmerged in favor of Starflow-based CI security scanning; #1924 landed the workflow, and #2027 later completed the explicit Starflow migration. | |
| #861 ci: use starflow policy checker | craft-parts | closed | Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4. | |
| #60 ci: use starflow policy and QA workflows | craft-platforms | merged | Merged into main as commit ab5f54e, replacing project-specific CI configuration with Canonical Starflow policy and QA workflows across eight files. | |
| #55 ci: automatic security scans | craft-platforms | merged | Merged PR #55 added an automated Starflow-based security scan workflow for the project. | |
| #72 fix(ci): use main branch from starflow | imagecraft | merged | Merged into main by 7f66595; commit 48ad760 updates two CI files to consume Starflow from its main branch. | |
| #71 fix(ci): use main branch from starflow | imagecraft | merged | Merged PR #71 in commit 1c91b2c, updating two CI files to reference Starflow's main branch. | |
| #622 build: switch to starflow | craft-application | merged | Merged PR #622 migrated craft-application’s build and CI tooling to Canonical Starflow after maintainer review. | |
| #272 ci: use starflow CI actions | starbase | merged | Merged as a411e24, switching Starbase CI to Starflow actions after canonical/starflow#18 landed. | |
| #52 ci: automatic security scans | craft-platforms | closed | Security scanning moved to canonical/starflow; unmerged PR #52 was superseded by merged PR #55 in commit 06de25b. |