ci: automatic security scans
Metadata
Current evaluation
Security scanning moved to canonical/starflow; unmerged PR #52 was superseded by merged PR #55 in commit 06de25b.
Resolution: closed superseded
Reason: The maintainer closed #52 unmerged, stating that the scans would use canonical/starflow. Replacement PR #55 merged the reusable workflow in commit 06de25b.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
-----
This is the libraries version. Compare to the applications version at https://github.com/canonical/charmcraft/pull/1915/files
Once approval is provided here, will upstream to Starbase and reproduce on our other libraries.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Security scanning moved to canonical/starflow; unmerged PR #52 was superseded by merged PR #55 in commit 06de25b. | |
| stealth/space-bunny-alpha | — | closed superseded | Security-scan changes were closed unmerged and superseded by craft-platforms#55, which added Starflow-based scanning in commit 06de25b. | |
| qwen/qwen3.6-35b-a3b | — | closed superseded | PR closed by author; CI security scan workflow is being migrated to canonical/starflow instead of being merged here. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Superseded By:
craft-platforms#55
(confidence 99%)
Merged the Starflow-based automatic security-scan workflow.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #55 ci: automatic security scans | craft-platforms | merged | Merged PR #55 added an automated Starflow-based security scan workflow for the project. | |
| #1915 ci: add security scans | charmcraft | closed | Closed unmerged in favor of Starflow-based CI security scanning; #1924 landed the workflow, and #2027 later completed the explicit Starflow migration. | |
| #573 ci: update usage of starflow security scanner | starbase | merged | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). | |
| #861 ci: use starflow policy checker | craft-parts | closed | Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4. | |
| #14 feat: golang security scanner | starflow | closed | Go security scanner proposal was closed unmerged and superseded by canonical/starflow#9, which added the workflow in commit 5ff0e00. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. | |
| #5068 ci: add security scan | snapcraft | merged | Merged PR #5068 in commit 040b66c00, adding CI security scanning across six files after approval by two reviewers. | |
| #2027 build(ci): use starflow for policy and security scans | charmcraft | merged | Merged PR #2027 as ad40ba4d (implementation bdc9a0a1), switching CI policy and security scans to Starflow after two approvals and a rebase onto main. | |
| #56 ci: add security scanning workflow | craft-grammar | merged | Merged security-scanning CI workflow via PR #56, recorded in commit a6f1a1d. | |
| #494 ci: add security scanning job | craft-application | merged | PR #494 was merged as 0b10cf66, adding a 15-line CI job for automated security scanning. |