ci: ignore unfixable OSVs
Metadata
Current evaluation
Merged CI configuration to ignore unfixable OSV warnings, replacing #2765 with the starbase #573 pattern. Approved by two reviewers and merged despite failing snap-store-tests and spread-select checks.
Suggested action: —
No scores available.
Issue body
Replaces #2765 with the same fix pattern as starbase #573.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged CI configuration to ignore unfixable OSV warnings, replacing #2765 with the starbase #573 pattern. Approved by two reviewers and merged despite failing snap-store-tests and spread-select checks. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
85
|
needs review | Updates CI configuration to ignore unfixable OSVs, replacing PR #2765 with a pattern from starbase #573. Currently awaiting initial maintainer review. |
Update history
| Date | Change |
|---|---|
| updated |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #247 ci: ignore unfixable OSVs | craft-platforms | merged | Merged a pull request adding a single configuration line to CI to ignore unfixable OSV scanner findings. The change passed all CI checks, received one approval, and was successfully integrated into the main branch. | |
| #199 ci: align policy OSV scan inputs with starbase | craft-grammar | closed | Superseded to align with required head branch work/fix-osv. The PR updated CI OSV scan inputs and added a placeholder config but was closed without merging. | |
| #1498 ci(osv-scanner): ignore integration tests | craft-parts | merged | Merged to configure OSV-scanner to ignore integration tests, preventing false positive dependency alerts. Approved by two reviewers and upstreamed to canonical/starbase. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged changes to update the OSV scanner configuration, aligning it with the starbase repository. Approved by one reviewer, passed all CI checks, and modified four files to replicate upstream updates. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed. | |
| #5487 ci: remove config for osv scanner | snapcraft | merged | Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge. | |
| #246 ci: ignore docs for CSVs | craft-platforms | merged | Merged a CI configuration update to ignore documentation files during CSV processing. Approved by one reviewer and merged after passing most checks, despite one failing OSV-scanner job. | |
| #5822 ci: ignore unresolvable OSV | snapcraft | merged | Merged a PR to ignore an unresolvable OSV scan failure in CI. The vulnerability cannot be resolved until pip 25.3 releases on October 30th. Approved by two reviewers and passed all CI checks. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | Merged. Aligns CI OSV scanner workflow inputs with starbase PR #573 by adding osv-scanner.toml, configuring extra args and excluded paths, and removing legacy requirements-find-args. No dependency updates required. | |
| #6350 test: fix spread tests | snapcraft | merged | Merged after fixing non-store spread tests and the OSV scanner. Pinned black to 26.3.1 to resolve patchelf segfaults and silent failures. Approved by two reviewers and passed CI checks. |