← Back to issue list

ci: align policy OSV scan inputs with starbase

View original Github issue

Metadata

Project
craft-grammar
Number
#200
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed.

Suggested action: —

No scores available.

Issue body

Sloperated by gpt-5.6-terra ## Summary - update `.github/workflows/policy.yaml` security scan inputs to pass `--config=osv-scanner.toml` - exclude `docs` from OSV scan paths and skip uv export groups `docs` and `docs-sphinx-stack` - add root `osv-scanner.toml` placeholder config file ## Dependency/lockfile impact - No dependency or lockfile changes were required because this fix only updates workflow inputs and adds scanner configuration metadata; project dependencies remain unchanged. ## Validation - `make format` - `make lint` - `make test-fast`

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed.
qwen3.6-35b-a3b-mtp-q6
Staleness: 0
Complexity: 15
Confidence: 95
needs review Updates CI workflow to align OSV scanner inputs with starbase, excludes docs from scanning, and adds a placeholder config file. No dependency changes. Ready for review.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#253 ci: align policy OSV scanner inputs with starbase craft-platforms merged Merged after passing all CI checks and approval. Updated the CI workflow to align OSV scanner inputs with starbase, configured osv-scanner.toml, and removed redundant arguments to standardize dependency scanning.
90%
#1640 ci: align policy OSV scanner inputs craft-parts merged Merged. Aligns CI OSV scanner workflow inputs with starbase PR #573 by adding osv-scanner.toml, configuring extra args and excluded paths, and removing legacy requirements-find-args. No dependency updates required.
88%
#199 ci: align policy OSV scan inputs with starbase craft-grammar closed Superseded to align with required head branch work/fix-osv. The PR updated CI OSV scan inputs and added a placeholder config but was closed without merging.
85%
#252 ci: align policy OSV scanner inputs with starbase craft-platforms closed Superseded to align with branch naming requirements. The PR updated CI workflow and OSV scanner configuration to match starbase standards but was closed and reopened as a draft from the work/fix-osv branch.
84%
#235 ci: update OSV scanner to match starbase craft-archives merged Merged changes to update the OSV scanner configuration, aligning it with the starbase repository. Approved by one reviewer, passed all CI checks, and modified four files to replicate upstream updates.
84%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged. Corrected the OSV-scanner workflow config path to align with Starbase and excluded docs from scanning. Updated the uv lockfile for httplib2 and setuptools to resolve scanner failures. All CI checks passed.
83%
#1639 ci: align policy OSV scanner inputs craft-parts closed Superseded by pull request #1640. Adjusts OSV scanner workflow inputs, adds configuration files, and excludes specific paths to align security scanning policies.
80%
#81 ci: align policy scan inputs with starbase PR 573 craft-actions closed Superseded by PR #82, which applies the required head branch work/fix-osv. The original policy scan input alignments and OSV scanner configuration were replaced rather than merged.
80%
#573 ci: update usage of starflow security scanner starbase merged Merged after two approvals and passing CI. Updated the python-scans job in policy.yaml to use new starflow security scanner options, adding an osv-scanner.toml placeholder and path exclusions.
78%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed configuration via osv-extra-args, excluded docs from UV export, and added osv-scanner.toml. All CI checks passed.
77%