ci: use starflow policy checker
Metadata
Current evaluation
Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4.
Resolution: closed superseded
Reason: PR #861 closed without review or recorded replacement. A later merged commit, c4133af4 in PR #573, updated Starflow security-scanner usage and superseded the abandoned proposal.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4. | |
| stealth/space-bunny-alpha | — | closed stale | The PR proposed replacing the CI policy checker with Starflow but was closed unmerged; no reviewer feedback, resolution, or replacement is recorded. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without merging. The pull request to update CI to use the starflow policy checker was abandoned due to zero reviewer engagement, missing CI validation, and no subsequent activity. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | CI update to use the starflow policy checker was closed without merging. An unchecked CLA checkbox and zero comments indicate the contribution was abandoned or rejected pending contributor agreement. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
craft-parts#573
(confidence 87%)
The later Starflow security-scanner update landed in c4133af4.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #12 feat: policy check workflows | starflow | closed | Closed unmerged; the reusable policy-check work was superseded by merged canonical/starflow#18, adding test, lint, and policy-check workflows in commit cd64717. | |
| #2027 build(ci): use starflow for policy and security scans | charmcraft | merged | Merged PR #2027 as ad40ba4d (implementation bdc9a0a1), switching CI policy and security scans to Starflow after two approvals and a rebase onto main. | |
| #82 ci: align policy scan inputs with starbase | craft-actions | closed | Closed unmerged: the PR added .github/workflows/policy.yaml plus osv-scanner.toml to align scan-python inputs with canonical/starbase#573. lengau closed it 2026-07-14 as unnecessary. | |
| #60 ci: use starflow policy and QA workflows | craft-platforms | merged | Merged into main as commit ab5f54e, replacing project-specific CI configuration with Canonical Starflow policy and QA workflows across eight files. | |
| #573 ci: update usage of starflow security scanner | starbase | merged | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). | |
| #1915 ci: add security scans | charmcraft | closed | Closed unmerged in favor of Starflow-based CI security scanning; #1924 landed the workflow, and #2027 later completed the explicit Starflow migration. | |
| #609 Smoke test for starflow#189 | starbase | closed | Closed unmerged after validating the smoke-test workflow for canonical/starflow#189; only expected policy checks failed. | |
| #699 ci: remove direct cla-check workflow | craft-application | merged | Merged PR #699 removed the redundant direct CLA-check workflow after Starflow’s policy workflow began covering the check; merged as commit 551a49cc. | |
| #81 ci: align policy scan inputs with starbase PR 573 | craft-actions | closed | PR #81 (add policy.yaml + osv-scanner.toml, align scan-python inputs with starbase#573) was closed unmerged by maintainer lengau, superseded by #82 which used the required work/fix-osv head branch. | |
| #55 ci: automatic security scans | craft-platforms | merged | Merged PR #55 added an automated Starflow-based security scan workflow for the project. |