ci: align policy OSV scanner inputs with starbase
Metadata
Current evaluation
Closed as superseded by #253, which merged the same OSV workflow-input and scanner-config alignment in commit 2ac71ad.
Resolution: closed superseded
Reason: The author closed #252 after noting it was superseded by a correctly named draft branch. PR #253 delivered the change and merged as commit 2ac71ad.
Evaluated by: mr-cal-bot
No scores available.
Issue body
## Summary
- update .github/workflows/policy.yaml to pass OSV scanner inputs:
- osv-extra-args: "--config=osv-scanner.toml"
- osv-exclude-paths with docs
- uv-export-no-groups with docs and docs-sphinx-stack
- ensure requirements-find-args is not present in that with block
- set root osv-scanner.toml to:
- # OSV Scanner configuration
## Dependency/lockfile impact
No dependency or lockfile changes were required for this fix because it only adjusts reusable policy workflow inputs and scanner config file content.
## Validation
- verified workflow contains required keys and omits requirements-find-args
- verified osv-scanner.toml content matches expected single-line config comment
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Closed as superseded by #253, which merged the same OSV workflow-input and scanner-config alignment in commit 2ac71ad. | |
| stealth/space-bunny-alpha | — | closed superseded | PR closed as superseded: lengau noted it was replaced by a draft reopened from work/fix-osv. The same OSV scanner input changes landed via merged PR #253 (commit 2ac71ad). | |
| stealth/space-bunny-alpha | — | closed superseded | Closed as superseded; canonical/craft-platforms#253 merged the OSV workflow-input alignment from a correctly named draft branch. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed without merging; superseded by canonical/craft-platforms#253 after reopening from work/fix-osv to meet branch naming requirements. | |
| qwen/qwen3.6-35b-a3b | — | — | Superseded to align with branch naming requirements. The PR updated CI workflow and OSV scanner configuration to match starbase standards but was closed and reopened as a draft from the work/fix-osv branch. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Superseded to align with branch naming requirements. Changes are being reopened as a draft from the work/fix-osv branch. The update adjusted CI policy OSV scanner inputs and config without modifying dependencies. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/craft-platforms#253
(confidence 100%)
Merged the same OSV scanner input and configuration alignment in commit 2ac71ad.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #199 ci: align policy OSV scan inputs with starbase | craft-grammar | closed | Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99. | |
| #1639 ci: align policy OSV scanner inputs | craft-parts | closed | PR #1639 (align policy OSV scanner inputs) was closed unmerged as superseded by #1640, which merged as commit 159bad0d applying the same OSV workflow inputs and root osv-scanner.toml config. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml. | |
| #81 ci: align policy scan inputs with starbase PR 573 | craft-actions | closed | PR #81 (add policy.yaml + osv-scanner.toml, align scan-python inputs with starbase#573) was closed unmerged by maintainer lengau, superseded by #82 which used the required work/fix-osv head branch. | |
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed. | |
| #82 ci: align policy scan inputs with starbase | craft-actions | closed | Closed unmerged: the PR added .github/workflows/policy.yaml plus osv-scanner.toml to align scan-python inputs with canonical/starbase#573. lengau closed it 2026-07-14 as unnecessary. | |
| #988 ci: fix OSV scanner policy workflow | craft-providers | merged | Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed. | |
| #6347 ci(scan): fix osv scanner on docs | snapcraft | merged | Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. |