ci: clean up OSV workflows
Metadata
Current evaluation
Merged PR #927 as commit 2daac417, standardizing OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration.
Resolution: closed resolved
Reason: PR #927 was merged into main as commit 2daac417. It aligned the OSV scanner arguments with the other Canonical projects and removed the obsolete configuration.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
---
Fixes up the OSV scanner workflows moving forward by using the same arguments [Snapcraft and Charmcraft use](https://github.com/canonical/snapcraft/blob/932bd92e510f1217a23551c9dd454bebdb771c2c/.github/workflows/policy.yaml#L16-L22) and removing a now-outdated config.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #927 as commit 2daac417, standardizing OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #927 as commit 2daac417, standardizing OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged as 2daac417: standardized OSV scanner arguments with Snapcraft and Charmcraft and removed outdated scanner configuration. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #927 (commit 2daac417, "ci: pull python-scans changes from charmcraft"): aligned OSV-scanner args with Snapcraft/Charmcraft and dropped an outdated config from the policy workflow. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #927 as commit 2daac417, aligning OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after approval. Updated OSV scanner workflows to align with Snapcraft and Charmcraft arguments, removing outdated configuration. The author noted the feature may never have functioned correctly, but the cleanup resolves previous inconsistencies. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to align OSV scanner workflow arguments with Snapcraft and remove outdated configuration. The author notes the updates may have never functioned initially but confirm the workflows are now stable. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #6347 ci(scan): fix osv scanner on docs | snapcraft | merged | Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning. | |
| #5487 ci: remove config for osv scanner | snapcraft | merged | Merged PR #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI. | |
| #988 ci: fix OSV scanner policy workflow | craft-providers | merged | Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed. | |
| #1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs | craft-application | merged | Merged PR #1130 as commit 235a5cc0, correcting the OSV config path and excluding docs paths and docs-only dependency groups from security scans. | |
| #253 ci: align policy OSV scanner inputs with starbase | craft-platforms | merged | Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. | |
| #199 ci: align policy OSV scan inputs with starbase | craft-grammar | closed | Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99. | |
| #2821 ci: fix osv workflow errors | charmcraft | merged | Merged as commit 67922e47; repaired the OSV security workflow and updated cryptography to resolve the reported OSV finding. | |
| #1299 ci: fix osv scanner on docs | rockcraft | merged | Merged PR #1299 via commit c0191bb5, configuring OSV Scanner to ignore documentation-derived content and fix docs security scanning. |