← Back to issue list

ci: fix osv workflow errors

View original Github issue

Metadata

Project
charmcraft
Number
#2821
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged fix for CI OSV workflow errors by updating the cryptography dependency. Approved by two reviewers and passed all required checks, successfully restoring the security scanning pipeline.

Suggested action: —

No scores available.

Issue body

Fixes an issue preventing the security workflow from running, updates cryptography to resolve OSV --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/charmcraft/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged fix for CI OSV workflow errors by updating the cryptography dependency. Approved by two reviewers and passed all required checks, successfully restoring the security scanning pipeline.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 15
Confidence: 90
needs review Fixes OSV workflow errors and updates cryptography dependency. Approved by two reviewers with zero unresolved comments. CI shows passing checks but two failing snap-build jobs.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 15
Confidence: 85
needs review Fixes OSV workflow errors and updates cryptography dependency. Approved by one reviewer, currently awaiting maintainer review due to some failing CI checks.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 90
needs review Fixes CI workflow errors preventing the security scan from running and updates the cryptography dependency to resolve OSV alerts. Currently awaiting maintainer review with CI checks pending.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Updates CI workflow permissions to fix a broken security scan. Currently pending maintainer review with most CI checks passing, though OSV-scanner is failing.

Update history

Date Change
updated
updated
updated
updated
created

Related issues

Issue Project State Summary Similarity
#6347 ci(scan): fix osv scanner on docs snapcraft merged Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue.
79%
#5487 ci: remove config for osv scanner snapcraft merged Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge.
76%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed configuration via osv-extra-args, excluded docs from UV export, and added osv-scanner.toml. All CI checks passed.
75%
#1299 ci: fix osv scanner on docs rockcraft merged Merged a configuration update to make the OSV scanner ignore documentation files. Approved by a reviewer, passed CI checks, and resolved scanner false positives in the docs directory with a single file change.
75%
#418 build: bump cryptography for OSV craft-store merged Merged to bump the cryptography dependency and resolve an OSV vulnerability. Approved by a reviewer, passed CI checks, and modified two files.
74%
#128 ci: add security scan workflow craft-archives merged Merged a change adding a security scan workflow to the CI pipeline. Approved by two reviewers, the update adds 15 lines across one file to automate security checks.
73%
#716 ci: add security scan workflow rockcraft merged Merged to add a CI security scan workflow. Approved by two reviewers, the change modifies three files to automate security checks in the pipeline.
73%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged. Corrected the OSV-scanner workflow config path to align with Starbase and excluded docs from scanning. Updated the uv lockfile for httplib2 and setuptools to resolve scanner failures. All CI checks passed.
73%
#56 ci: add security scanning workflow craft-grammar merged Merged adds a CI workflow for security scanning. Approved by two reviewers, the change introduces a single configuration file to automate pipeline security checks.
73%
#200 ci: align policy OSV scan inputs with starbase craft-grammar merged Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed.
72%