ci: align policy OSV scan inputs with starbase
Metadata
Current evaluation
Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups.
Resolution: closed resolved
Reason: PR #200 was approved with all listed CI checks passing and was merged as commit c359e99. The change adds the scanner configuration placeholder and updates the policy workflow's OSV scan inputs.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Sloperated by gpt-5.6-terra
## Summary
- update `.github/workflows/policy.yaml` security scan inputs to pass `--config=osv-scanner.toml`
- exclude `docs` from OSV scan paths and skip uv export groups `docs` and `docs-sphinx-stack`
- add root `osv-scanner.toml` placeholder config file
## Dependency/lockfile impact
- No dependency or lockfile changes were required because this fix only updates workflow inputs and adds scanner configuration metadata; project dependencies remain unchanged.
## Validation
- `make format`
- `make lint`
- `make test-fast`
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/craft-grammar#200, aligning policy OSV inputs with starbase by adding osv-scanner.toml, excluding docs, and skipping docs UV groups. Approval and all CI checks passed. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
0
Complexity:
15
Confidence:
95
|
needs review | Updates CI workflow to align OSV scanner inputs with starbase, excludes docs from scanning, and adds a placeholder config file. No dependency changes. Ready for review. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml. | |
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed. | |
| #252 ci: align policy OSV scanner inputs with starbase | craft-platforms | closed | Closed as superseded by #253, which merged the same OSV workflow-input and scanner-config alignment in commit 2ac71ad. | |
| #199 ci: align policy OSV scan inputs with starbase | craft-grammar | closed | Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99. | |
| #81 ci: align policy scan inputs with starbase PR 573 | craft-actions | closed | PR #81 (add policy.yaml + osv-scanner.toml, align scan-python inputs with starbase#573) was closed unmerged by maintainer lengau, superseded by #82 which used the required work/fix-osv head branch. | |
| #1639 ci: align policy OSV scanner inputs | craft-parts | closed | PR #1639 (align policy OSV scanner inputs) was closed unmerged as superseded by #1640, which merged as commit 159bad0d applying the same OSV workflow inputs and root osv-scanner.toml config. | |
| #82 ci: align policy scan inputs with starbase | craft-actions | closed | Closed unmerged: the PR added .github/workflows/policy.yaml plus osv-scanner.toml to align scan-python inputs with canonical/starbase#573. lengau closed it 2026-07-14 as unnecessary. | |
| #988 ci: fix OSV scanner policy workflow | craft-providers | merged | Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. | |
| #6347 ci(scan): fix osv scanner on docs | snapcraft | merged | Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning. |