← Back to issue list

ci: add security scanner job

View original Github issue

Metadata

Project
fetch-service
Number
#233
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #233 as commit 3dadebe, adding a TIOBE TICS security-scanner CI job; called findings fail the job, while uncalled warnings remain non-fatal.

Resolution: closed resolved

Reason: PR #233 was approved and merged as commit 3dadebe. The maintainer clarified that called TIOBE findings become errors, while uncalled warning-level vulnerabilities return success.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? -----

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #233 as commit 3dadebe, adding a TIOBE TICS security-scanner CI job; called findings fail the job, while uncalled warnings remain non-fatal.
stealth/space-bunny-alpha — closed resolved Merged PR #233 (commit 3dadebe) added a CI security scanner job. Uncalled warning-level vulnerabilities return 0; called vulnerabilities become errors.
qwen/qwen3.6-35b-a3b — — Merged. Added a CI security scanner job that fails on detected vulnerabilities. Reviewers approved the change, noting that warning-level issues currently return exit code 0.

Update history

Date Change
created

Related work

Related issues

Issue Project State Summary Similarity
#859 ci: add security scanning job craft-parts merged Merged PR #859 added a 15-line CI security-scanning job; the change landed in commit 19ec5517.
81%
#494 ci: add security scanning job craft-application merged PR #494 was merged as 0b10cf66, adding a 15-line CI job for automated security scanning.
80%
#5068 ci: add security scan snapcraft merged Merged PR #5068 in commit 040b66c00, adding CI security scanning across six files after approval by two reviewers.
76%
#666 ci: add security scan workflow craft-providers merged Merged PR #666 added a CI security-scan workflow; merge commit b1abe71 records the change.
74%
#56 ci: add security scanning workflow craft-grammar merged Merged security-scanning CI workflow via PR #56, recorded in commit a6f1a1d.
73%
#418 ci: fix security scan workflow imagecraft merged Merged PR #418 (commit f7059bc) fixed zizmor CI by granting the policy job security-events: write, mirroring canonical/craft-archives#245. Dependencies were unchanged.
71%
#6303 ci: test new secscan action snapcraft closed PR #6303 tested a new secscan CI action but was closed unmerged after secscan, OSV-scanner, and multiple integration jobs failed.
71%
#1924 ci: add security scan workflow charmcraft merged Merged #1924 in commit 5634ecb1, adding the CI security-scan workflow after syncing canonical/craft-archives#128; two reviewers approved it.
70%