ci: automatic security scans
Metadata
Current evaluation
Merged PR #55 added an automated Starflow-based security scan workflow for the project.
Resolution: closed resolved
Reason: PR #55 was merged into main as commit 06de25b, adding the automatic security scanning workflow. The later Starflow scanner update in #573 was follow-up maintenance, not a replacement for the merged change.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
-----
This is a new security scan PR using the Starflow workflow
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #55 added an automated Starflow-based security scan workflow for the project. | |
| qwen/qwen3.6-35b-a3b | — | closed resolved | Merged PR introducing automatic security scans via a new Starflow CI workflow, adding 13 lines to a single configuration file. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
craft-platforms#573
(confidence 98%)
Commit c4133af updates usage of the Starflow security scanner introduced by this workflow.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #52 ci: automatic security scans | craft-platforms | closed | Security scanning moved to canonical/starflow; unmerged PR #52 was superseded by merged PR #55 in commit 06de25b. | |
| #1915 ci: add security scans | charmcraft | closed | Closed unmerged in favor of Starflow-based CI security scanning; #1924 landed the workflow, and #2027 later completed the explicit Starflow migration. | |
| #573 ci: update usage of starflow security scanner | starbase | merged | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). | |
| #2027 build(ci): use starflow for policy and security scans | charmcraft | merged | Merged PR #2027 as ad40ba4d (implementation bdc9a0a1), switching CI policy and security scans to Starflow after two approvals and a rebase onto main. | |
| #56 ci: add security scanning workflow | craft-grammar | merged | Merged security-scanning CI workflow via PR #56, recorded in commit a6f1a1d. | |
| #3 feat: Python project scan reusable workflow | starflow | merged | Merged the reusable Python project security-scan workflow in canonical/starflow#3 at commit 41c1942, adding 231 lines across two files. | |
| #861 ci: use starflow policy checker | craft-parts | closed | Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4. | |
| #259 ci: add security scan workflow | starbase | merged | Merged PR #259 added a GitHub Actions security scan workflow in commit 59e5c4b. | |
| #14 feat: golang security scanner | starflow | closed | Go security scanner proposal was closed unmerged and superseded by canonical/starflow#9, which added the workflow in commit 5ff0e00. | |
| #716 ci: add security scan workflow | rockcraft | merged | Merged PR #716 added the security-scan workflow; commit 94b6877e records the change in the repository history. |