ci: align policy scan inputs with starbase
Metadata
Current evaluation
Closed without merging as unnecessary. The repository does not use the policy/scan-python workflow pattern targeted by the starbase #573 fix, rendering the alignment changes redundant.
Suggested action: —
No scores available.
Issue body
Sloperated by gpt-5
## Summary
- add `.github/workflows/policy.yaml` with the policy and python security scan jobs
- update scan-python inputs to use `osv-extra-args`, `osv-exclude-paths`, and `uv-export-no-groups`
- ensure `requirements-find-args` is not present in the scan `with:` block
- add `osv-scanner.toml` with the OSV scanner config placeholder
## Dependency/lockfile changes
- none required: this change only updates GitHub workflow inputs and adds a scanner config file; no dependency manifests or lockfiles were changed.
## Validation
- `npx --yes prettier --check .github/workflows/policy.yaml`
- verified `osv-scanner.toml` content matches expected single-line placeholder
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Closed without merging as unnecessary. The repository does not use the policy/scan-python workflow pattern targeted by the starbase #573 fix, rendering the alignment changes redundant. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
85
|
needs review | Updates GitHub Actions policy scan workflow inputs to align with starbase, adds osv-scanner.toml placeholder, and removes deprecated arguments. Currently awaiting review. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #81 ci: align policy scan inputs with starbase PR 573 | craft-actions | closed | Superseded by PR #82, which applies the required head branch work/fix-osv. The original policy scan input alignments and OSV scanner configuration were replaced rather than merged. | |
| #199 ci: align policy OSV scan inputs with starbase | craft-grammar | closed | Superseded to align with required head branch work/fix-osv. The PR updated CI OSV scan inputs and added a placeholder config but was closed without merging. | |
| #252 ci: align policy OSV scanner inputs with starbase | craft-platforms | closed | Superseded to align with branch naming requirements. The PR updated CI workflow and OSV scanner configuration to match starbase standards but was closed and reopened as a draft from the work/fix-osv branch. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | Merged. Aligns CI OSV scanner workflow inputs with starbase PR #573 by adding osv-scanner.toml, configuring extra args and excluded paths, and removing legacy requirements-find-args. No dependency updates required. | |
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged after passing all CI checks and approval. Updated the CI workflow to align OSV scanner inputs with starbase, configured osv-scanner.toml, and removed redundant arguments to standardize dependency scanning. |