ci: fix osv workflow errors
Metadata
Current evaluation
Merged as commit 67922e47; repaired the OSV security workflow and updated cryptography to resolve the reported OSV finding.
Resolution: closed resolved
Reason: PR #2821 was merged as commit 67922e47, fixing the workflow errors and updating cryptography to clear the OSV finding.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Fixes an issue preventing the security workflow from running, updates cryptography to resolve OSV
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/charmcraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged as commit 67922e47; repaired the OSV security workflow and updated cryptography to resolve the reported OSV finding. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #2821 (commit 67922e47), fixing the OSV workflow and updating cryptography to resolve the reported OSV finding. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged fix for CI OSV workflow errors by updating the cryptography dependency. Approved by two reviewers and passed all required checks, successfully restoring the security scanning pipeline. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
15
Confidence:
90
|
needs review | Fixes OSV workflow errors and updates cryptography dependency. Approved by two reviewers with zero unresolved comments. CI shows passing checks but two failing snap-build jobs. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
15
Confidence:
85
|
needs review | Fixes OSV workflow errors and updates cryptography dependency. Approved by one reviewer, currently awaiting maintainer review due to some failing CI checks. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
10
Confidence:
90
|
needs review | Fixes CI workflow errors preventing the security scan from running and updates the cryptography dependency to resolve OSV alerts. Currently awaiting maintainer review with CI checks pending. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates CI workflow permissions to fix a broken security scan. Currently pending maintainer review with most CI checks passing, though OSV-scanner is failing. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs | craft-application | merged | Merged PR #1130 as commit 235a5cc0, correcting the OSV config path and excluding docs paths and docs-only dependency groups from security scans. | |
| #988 ci: fix OSV scanner policy workflow | craft-providers | merged | Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed. | |
| #1299 ci: fix osv scanner on docs | rockcraft | merged | Merged PR #1299 via commit c0191bb5, configuring OSV Scanner to ignore documentation-derived content and fix docs security scanning. | |
| #418 build: bump cryptography for OSV | craft-store | merged | PR #418 (maintainer bepri) bumped the cryptography dependency in2 files (+56/-56) to clear an OSV vulnerability. Approved and merged as commit e8fef67, with the OSV-scanner security check passing. | |
| #927 ci: clean up OSV workflows | rockcraft | closed | Merged PR #927 as commit 2daac417, standardizing OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration. |