chore: ignore osv-scanner false positives
Metadata
Current evaluation
PR adds osv-scanner configuration to ignore false positives, currently failing CI with no reviewer engagement after 65 days
Suggested action: needs review
Reason: PR has been inactive for 65 days with zero reviewer engagement and is failing CI checks (OSV-scanner, lint). A maintainer review is needed to assess if the false positive configuration is still relevant and to address the failing CI before deciding whether to merge or close.
Impact:
30
Quick Win:
27.0
Staleness:
65
Complexity:
10
Confidence:
60
Issue body
Describe your changes.
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen3.6-35b-a3b-mtp-q6 |
Impact:
30
Quick Win:
27.0
Staleness:
65
Complexity:
10
Confidence:
60
|
needs review | PR adds osv-scanner configuration to ignore false positives, currently failing CI with no reviewer engagement after 65 days | |
| qwen/qwen3.6-35b-a3b |
Staleness:
60
Complexity:
15
Confidence:
75
|
needs review | Adds configuration to suppress OSV-scanner false positives. Currently pending review with zero comments. CI shows failing OSV-scanner and lint checks. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
70
|
needs review | Configures osv-scanner to suppress known false positives. The PR is open, lacks a description, and has received no comments or reviews, awaiting maintainer evaluation. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
85
|
needs review | Adds configuration to suppress known false positive alerts from osv-scanner. Currently unreviewed and awaiting maintainer feedback. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #505 ci(osv-scanner): ignore integration tests | starbase | merged | Merged CI configuration changes to configure osv-scanner to ignore integration tests, preventing false positive dependency warnings. Approved by two reviewers with all checks passing. | |
| #1299 ci: fix osv scanner on docs | rockcraft | merged | Merged a configuration update to make the OSV scanner ignore documentation files. Approved by a reviewer, passed CI checks, and resolved scanner false positives in the docs directory with a single file change. | |
| #5487 ci: remove config for osv scanner | snapcraft | merged | Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge. |