chore: ignore osv-scanner false positives
Metadata
Current evaluation
Superseded by canonical/imagecraft#505, merged as e7954a7 to add OSV-Scanner exclusions for integration-test false positives; #371's conflicts were resolved in 2beb57d.
Resolution: closed superseded
Reason: PR #371 contained no file changes and was replaced by canonical/imagecraft#505, which merged as e7954a7 with the intended OSV-Scanner exclusions. Commit 2beb57d only recorded conflict resolution for #371.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Describe your changes.
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Superseded by canonical/imagecraft#505, merged as e7954a7 to add OSV-Scanner exclusions for integration-test false positives; #371's conflicts were resolved in 2beb57d. | |
| stealth/space-bunny-alpha | — | closed resolved | PR #505 was merged as e7954a7, adding OSV-Scanner exclusions for integration-test false positives; conflict resolution was also recorded in 2beb57d. | |
| stealth/space-bunny-alpha |
Impact:
20
Quick Win:
6
Complexity:
15
Confidence:
80
Actionability:
35
|
needs review | Suppresses OSV-scanner false positives in an eight-line change; no review activity for 84 days, with OSV-scanner and lint/files checks failing. | |
| qwen3.6-35b-a3b-mtp-q6 |
Impact:
30
Quick Win:
27
Staleness:
65
Complexity:
10
Confidence:
60
|
needs review | PR adds osv-scanner configuration to ignore false positives, currently failing CI with no reviewer engagement after 65 days | |
| qwen/qwen3.6-35b-a3b |
Staleness:
60
Complexity:
15
Confidence:
75
|
needs review | Adds configuration to suppress OSV-scanner false positives. Currently pending review with zero comments. CI shows failing OSV-scanner and lint checks. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
70
|
needs review | Configures osv-scanner to suppress known false positives. The PR is open, lacks a description, and has received no comments or reviews, awaiting maintainer evaluation. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
85
|
needs review | Adds configuration to suppress known false positive alerts from osv-scanner. Currently unreviewed and awaiting maintainer feedback. |
Update history
| Date | Change |
|---|---|
| closed | |
| updated | |
| updated | |
| updated |
Related work
-
Superseded By:
imagecraft#505
(confidence 99%)
Merged as e7954a7 and added the requested OSV-Scanner false-positive exclusions.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #505 ci(osv-scanner): ignore integration tests | starbase | merged | Merged as commit e7954a7: OSV-scanner config now excludes integration tests, silencing false positives from test-only dependencies. Downstream change landed in canonical/craft-parts#1498. | |
| #1498 ci(osv-scanner): ignore integration tests | craft-parts | merged | Merged #1498 (commit 559a7daf), excluding tests/integration from OSV-Scanner inputs to prevent false-positive dependency findings. | |
| #5487 ci: remove config for osv scanner | snapcraft | merged | Merged PR #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI. |