← Back to issue list

ci: align policy OSV scanner inputs with starbase

View original Github issue

Metadata

Project
craft-platforms
Number
#253
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed.

Resolution: closed resolved

Reason: PR #253 itself was merged with all listed CI checks passing, applying the policy-workflow OSV input alignment (+7/-0 lines) plus the root osv-scanner.toml. It supersedes the earlier draft PR canonical/craft-platforms#252 and mirrors the same change merged upstream in canonical/craft-parts#1640 (commit 159bad0d).

Evaluated by: mr-cal-bot

No scores available.

Issue body

Sloperated by gpt-5.6-terra ## Summary - update .github/workflows/policy.yaml to pass OSV scanner inputs: - osv-extra-args: "--config=osv-scanner.toml" - osv-exclude-paths with docs - uv-export-no-groups with docs and docs-sphinx-stack - ensure requirements-find-args is not present in that with block - set root osv-scanner.toml to: - # OSV Scanner configuration ## Dependency/lockfile impact No dependency or lockfile changes were required for this fix because it only adjusts reusable policy workflow inputs and scanner config file content. ## Validation - verified workflow contains required keys and omits requirements-find-args - verified osv-scanner.toml content matches expected single-line config comment

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed.
stealth/space-bunny-alpha — closed resolved Merged PR canonical/craft-parts#1640 aligned the policy workflow’s OSV scanner inputs with starbase, including configuration, exclusions, and removal of requirements-find-args. All reported CI checks passed.
qwen/qwen3.6-35b-a3b — — Merged after passing all CI checks and approval. Updated the CI workflow to align OSV scanner inputs with starbase, configured osv-scanner.toml, and removed redundant arguments to standardize dependency scanning.
qwen3.6-35b-a3b-mtp-q6
Staleness: 5
Complexity: 15
Confidence: 90
needs review Updates CI policy workflow to align OSV scanner inputs with starbase, excludes docs paths, and sets root osv-scanner.toml to a comment. No dependency changes. Awaiting review.

Update history

No update history recorded yet.

Related work

  • Duplicate Of: canonical/craft-platforms#252 (confidence 90%)

    Earlier identically titled PR, closed unmerged as superseded by #253.

  • Related To: canonical/craft-parts#1640 (confidence 80%)

    Same OSV workflow-input alignment merged in craft-parts as commit 159bad0d; craft-parts#1639 was its superseded draft.

  • Related To: canonical/craft-parts#1639 (confidence 70%)

    Superseded draft of the equivalent craft-parts change, closed in favour of #1640.

Related issues

Issue Project State Summary Similarity
#1640 ci: align policy OSV scanner inputs craft-parts merged PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml.
91%
#200 ci: align policy OSV scan inputs with starbase craft-grammar merged Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups.
88%
#199 ci: align policy OSV scan inputs with starbase craft-grammar closed Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99.
84%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed.
82%
#252 ci: align policy OSV scanner inputs with starbase craft-platforms closed Closed as superseded by #253, which merged the same OSV workflow-input and scanner-config alignment in commit 2ac71ad.
82%
#1639 ci: align policy OSV scanner inputs craft-parts closed PR #1639 (align policy OSV scanner inputs) was closed unmerged as superseded by #1640, which merged as commit 159bad0d applying the same OSV workflow inputs and root osv-scanner.toml config.
82%
#81 ci: align policy scan inputs with starbase PR 573 craft-actions closed PR #81 (add policy.yaml + osv-scanner.toml, align scan-python inputs with starbase#573) was closed unmerged by maintainer lengau, superseded by #82 which used the required work/fix-osv head branch.
81%
#82 ci: align policy scan inputs with starbase craft-actions closed Closed unmerged: the PR added .github/workflows/policy.yaml plus osv-scanner.toml to align scan-python inputs with canonical/starbase#573. lengau closed it 2026-07-14 as unnecessary.
80%
#235 ci: update OSV scanner to match starbase craft-archives merged Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed.
80%
#6347 ci(scan): fix osv scanner on docs snapcraft merged Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning.
76%