ci: ignore unfixable OSVs
Metadata
Current evaluation
Merged as ca4a9950, updating CI to ignore unfixable OSVs; #2773 replaced the unmerged #2765 using the starbase #573 fix pattern.
Resolution: closed resolved
Reason: PR #2773 was merged as commit ca4a9950. Its CI configuration now ignores vulnerabilities that cannot be fixed, superseding the unmerged #2765.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Replaces #2765 with the same fix pattern as starbase #573.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged as ca4a9950, updating CI to ignore unfixable OSVs; #2773 replaced the unmerged #2765 using the starbase #573 fix pattern. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged as ca4a9950, updating OSV-scanner CI to ignore unfixable vulnerabilities and superseding unmerged #2765. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in ca4a9950: CI now ignores unfixable OSVs, replacing #2765 with the starbase #573 fix pattern. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged CI configuration to ignore unfixable OSV warnings, replacing #2765 with the starbase #573 pattern. Approved by two reviewers and merged despite failing snap-store-tests and spread-select checks. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
85
|
needs review | Updates CI configuration to ignore unfixable OSVs, replacing PR #2765 with a pattern from starbase #573. Currently awaiting initial maintainer review. |
Update history
| Date | Change |
|---|---|
| updated |
Related work
-
Related To:
canonical/charmcraft#2765
(confidence 100%)
The earlier unmerged PR was closed as superseded by #2773.
-
Related To:
canonical/starbase#573
(confidence 95%)
Provided the OSV-ignore fix pattern reused by #2773.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #247 ci: ignore unfixable OSVs | craft-platforms | merged | PR #247 merged into main, updating CI to ignore OSV findings with no available fix. | |
| #5822 ci: ignore unresolvable OSV | snapcraft | merged | Merged PR #5822 via commit ab206ab45, adding a CI exception for an unresolvable OSV until pip 25.3 so it would not fail every PR. |