ci: ignore unfixable OSVs
Metadata
Current evaluation
PR #247 merged into main, updating CI to ignore OSV findings with no available fix.
Resolution: closed resolved
Reason: The OSV-scanner change was merged through canonical/craft-platforms#247, with implementation commit dd076cd and merge record ca4a9950. All listed CI checks passed.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
---
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | PR #247 merged into main, updating CI to ignore OSV findings with no available fix. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #247 as dd076cd (merge ca4a9950), updating CI to ignore unfixable OSV findings so the scanner check remains passing. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in ca4a9950: CI now ignores unfixable OSVs, replacing #2765 with the starbase #573 fix pattern. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a pull request adding a single configuration line to CI to ignore unfixable OSV scanner findings. The change passed all CI checks, received one approval, and was successfully integrated into the main branch. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a maintainer change updating the CI pipeline to automatically ignore unfixable OSV alerts, streamlining security scanning by filtering known unresolvable vulnerabilities. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #2773 ci: ignore unfixable OSVs | charmcraft | merged | Merged as ca4a9950, updating CI to ignore unfixable OSVs; #2773 replaced the unmerged #2765 using the starbase #573 fix pattern. | |
| #5822 ci: ignore unresolvable OSV | snapcraft | merged | Merged PR #5822 via commit ab206ab45, adding a CI exception for an unresolvable OSV until pip 25.3 so it would not fail every PR. | |
| #5487 ci: remove config for osv scanner | snapcraft | merged | Merged PR #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI. |