ci: align policy OSV scan inputs with starbase
Metadata
Current evaluation
Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99.
Resolution: closed superseded
Reason: The author closed #199 as superseded to align with the required work/fix-osv branch. The replacement PR canonical/craft-grammar#200 was merged as commit c359e99.
Evaluated by: mr-cal-bot
No scores available.
Issue body
## Summary
- update `.github/workflows/policy.yaml` security scan inputs to pass `--config=osv-scanner.toml`
- exclude `docs` from OSV scan paths and skip uv export groups `docs` and `docs-sphinx-stack`
- add root `osv-scanner.toml` placeholder config file
## Dependency/lockfile impact
- No dependency or lockfile changes were required because this fix only updates workflow inputs and adds scanner configuration metadata; project dependencies remain unchanged.
## Validation
- `make format`
- `make lint`
- `make test-fast`
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged and superseded by craft-grammar#200, which merged the OSV workflow/config alignment as commit c359e99. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged and superseded by canonical/craft-actions#82, created from the required work/fix-osv branch. Maintainer marked the original PR as superseded. | |
| qwen/qwen3.6-35b-a3b | — | — | Superseded to align with required head branch work/fix-osv. The PR updated CI OSV scan inputs and added a placeholder config but was closed without merging. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Superseded to align with required head branch work/fix-osv. The update to CI OSV scan inputs and placeholder config file was closed without merging. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/craft-grammar#200
(confidence 99%)
Merged replacement implementing the same policy OSV input and osv-scanner.toml changes.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #252 ci: align policy OSV scanner inputs with starbase | craft-platforms | closed | Closed as superseded by #253, which merged the same OSV workflow-input and scanner-config alignment in commit 2ac71ad. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups. | |
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed. | |
| #1639 ci: align policy OSV scanner inputs | craft-parts | closed | PR #1639 (align policy OSV scanner inputs) was closed unmerged as superseded by #1640, which merged as commit 159bad0d applying the same OSV workflow inputs and root osv-scanner.toml config. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml. | |
| #82 ci: align policy scan inputs with starbase | craft-actions | closed | Closed unmerged: the PR added .github/workflows/policy.yaml plus osv-scanner.toml to align scan-python inputs with canonical/starbase#573. lengau closed it 2026-07-14 as unnecessary. | |
| #81 ci: align policy scan inputs with starbase PR 573 | craft-actions | closed | PR #81 (add policy.yaml + osv-scanner.toml, align scan-python inputs with starbase#573) was closed unmerged by maintainer lengau, superseded by #82 which used the required work/fix-osv head branch. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. | |
| #6347 ci(scan): fix osv scanner on docs | snapcraft | merged | Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning. | |
| #861 ci: use starflow policy checker | craft-parts | closed | Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4. |