ci: update OSV scanner to match starbase
Metadata
Current evaluation
Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed.
Resolution: closed resolved
Reason: PR #235 was approved and merged with all reported CI checks passing. It replicates canonical/starbase#573, which was merged as commit c4133af.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Replicates https://github.com/canonical/starbase/pull/573
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged craft-archives#235, updating OSV scanner CI to match canonical/starbase#573. Approved by one reviewer, with all reported CI checks passing. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged changes to update the OSV scanner configuration, aligning it with the starbase repository. Approved by one reviewer, passed all CI checks, and modified four files to replicate upstream updates. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
0
Complexity:
10
Confidence:
90
|
needs review | Updates CI configuration to align OSV scanner settings with the starbase repository. Freshly opened by a maintainer, awaiting initial review. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/starbase#573
(confidence 100%)
Source PR explicitly replicated by craft-archives#235; merged as commit c4133af.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed. | |
| #6347 ci(scan): fix osv scanner on docs | snapcraft | merged | Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups. | |
| #199 ci: align policy OSV scan inputs with starbase | craft-grammar | closed | Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99. | |
| #409 chore(merge): update starbase (2026-07-22) | craft-store | merged | Merged into main via commit 5802f2b. Starbase sync brought uv/OSV-scanner renovate+policy setup, shfmt tooling, common.mk updates and osv-scanner.toml, keeping repo-owned uv.lock and pyproject metadata; all CI green. | |
| #52 ci: automatic security scans | craft-platforms | closed | Security scanning moved to canonical/starflow; unmerged PR #52 was superseded by merged PR #55 in commit 06de25b. | |
| #252 ci: align policy OSV scanner inputs with starbase | craft-platforms | closed | Closed as superseded by #253, which merged the same OSV workflow-input and scanner-config alignment in commit 2ac71ad. | |
| #125 ci: update renovate config for starbase | craft-archives | merged | Renovate and CI configuration was updated from canonical/starbase#232 and merged in craft-archives#125 via commit 1fd63d4. | |
| #988 ci: fix OSV scanner policy workflow | craft-providers | merged | Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed. | |
| #573 ci: update usage of starflow security scanner | starbase | merged | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). |