← Back to issue list

ci: exclude tests from OSV source scan

View original Github issue

Metadata

Project
charmcraft
Number
#2951
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #2951 (commit 5dc3fd6c) excluded test directories from OSV source scanning, removing test requirements and lock files; paired with merged dependency update #2950.

Resolution: closed resolved

Reason: PR #2951 was merged as commit 5dc3fd6c, adding tests to the OSV exclusion paths in .github/workflows/policy.yaml. The paired merged dependency update in PR #2950 was intended to make the OSV scanner green.

Evaluated by: mr-cal-bot

No scores available.

Issue body

*Sloperated-by: Space Bunny Free (OpenCode)* Remove requirements/lock files in test directories from the OSV scan. Paired with https://github.com/canonical/charmcraft/pull/2950 this should result in a green OSV scanner.

Evaluation history

Date Model Scores Action Summary
minimax/minimax-m3.1-flash:free — closed resolved Merged PR #2951 (commit 5dc3fd6c) excluded test directories from OSV source scanning, removing test requirements and lock files; paired with merged dependency update #2950.

Update history

Date Change
merged
updated
created

Related work

  • Related To: canonical/charmcraft#2950 (confidence 100%)

    Paired merged dependency update intended to resolve the remaining OSV scanner findings.

Related issues

Issue Project State Summary Similarity
#1738 ci: exclude tests/integration from the OSV source scan craft-parts closed Closed unmerged after the OSV exclusion was included via #1728; tests/integration is now excluded alongside docs in policy.yaml.
81%
#2913 ci: exclude Spread tests from OSV dependency scans charmcraft closed PR #2913 to exclude tests/spread from OSV scans was closed without merging; CI checks (lint, conventional commits, OSV-scanner) were still failing at closure.
79%
#1498 ci(osv-scanner): ignore integration tests craft-parts merged Merged #1498 (commit 559a7daf), excluding tests/integration from OSV-Scanner inputs to prevent false-positive dependency findings.
78%
#962 ci: ignore sample files in OSV scans rockcraft merged Merged PR #962 as commit e9b702cb to exclude documentation and spread-test sample files from OSV scans, avoiding findings for demo-only vulnerable versions.
76%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged PR #1130 as commit 235a5cc0, correcting the OSV config path and excluding docs paths and docs-only dependency groups from security scans.
76%
#505 ci(osv-scanner): ignore integration tests starbase merged Merged as commit e7954a7: OSV-scanner config now excludes integration tests, silencing false positives from test-only dependencies. Downstream change landed in canonical/craft-parts#1498.
75%
#5487 ci: remove config for osv scanner snapcraft merged Merged PR #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI.
74%
#157 ci(scan): allow ignoring files/directories starflow merged Merged #157, adding configurable OSV-scanner exclusions so docs dependencies are ignored. All CI passed; docs fixes are deferred to the Sphinx Stack and Starbase update pipeline.
73%
#1299 ci: fix osv scanner on docs rockcraft merged Merged PR #1299 via commit c0191bb5, configuring OSV Scanner to ignore documentation-derived content and fix docs security scanning.
71%