ci: fix OSV scanner policy workflow
Metadata
Current evaluation
Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed configuration via osv-extra-args, excluded docs from UV export, and added osv-scanner.toml. All CI checks passed.
Suggested action: —
No scores available.
Issue body
Sloperated by GPT-5.3-Codex
## Summary
- switch to current scan-python OSV inputs
- pass OSV config via osv-extra-args
- exclude docs path and docs dependency groups from UV export for scanning
- add osv-scanner.toml
## Context
Aligns with the approach used in canonical/starbase#573 and addresses the OSV scan failures seen in run 29360705241.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed configuration via osv-extra-args, excluded docs from UV export, and added osv-scanner.toml. All CI checks passed. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed config via osv-extra-args, excluded docs paths and dependencies from UV export, and added osv-scanner.toml. Aligns with canonical/starbase#573. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs | craft-application | merged | Merged. Corrected the OSV-scanner workflow config path to align with Starbase and excluded docs from scanning. Updated the uv lockfile for httplib2 and setuptools to resolve scanner failures. All CI checks passed. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | Merged. Aligns CI OSV scanner workflow inputs with starbase PR #573 by adding osv-scanner.toml, configuring extra args and excluded paths, and removing legacy requirements-find-args. No dependency updates required. | |
| #1299 ci: fix osv scanner on docs | rockcraft | merged | Merged a configuration update to make the OSV scanner ignore documentation files. Approved by a reviewer, passed CI checks, and resolved scanner false positives in the docs directory with a single file change. | |
| #6347 ci(scan): fix osv scanner on docs | snapcraft | merged | Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue. | |
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged after passing all CI checks and approval. Updated the CI workflow to align OSV scanner inputs with starbase, configured osv-scanner.toml, and removed redundant arguments to standardize dependency scanning. | |
| #5487 ci: remove config for osv scanner | snapcraft | merged | Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge. | |
| #200 ci: align policy OSV scan inputs with starbase | craft-grammar | merged | Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed. | |
| #1639 ci: align policy OSV scanner inputs | craft-parts | closed | Superseded by pull request #1640. Adjusts OSV scanner workflow inputs, adds configuration files, and excludes specific paths to align security scanning policies. | |
| #2821 ci: fix osv workflow errors | charmcraft | merged | Merged fix for CI OSV workflow errors by updating the cryptography dependency. Approved by two reviewers and passed all required checks, successfully restoring the security scanning pipeline. | |
| #160 fix(scan): fix path resolution for osv-scanner file arguments | starflow | merged | Merged fix for osv-scanner path resolution. Removes the required source/ prefix in osv-extra-args, enabling direct config file references. Approved by one reviewer and passed CI checks prior to merge. |