← Back to issue list

ci: remove config for osv scanner

View original Github issue

Metadata

Project
snapcraft
Number
#5487
Type
pull request
State
merged
Author
bepri
Labels
Created
Updated
Closed

Current evaluation

Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge.

Suggested action:

No scores available.

Issue body

- [x] Have you followed the [guidelines for contributing](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md)? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint`? - [ ] Have you successfully run `make test`? --- Removes an OSV scanner config that was both resolved and expired.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge.
qwen3.6-35b-a3b-mtp-q6 Merged removal of expired and resolved OSV scanner configuration from the CI pipeline. The change was authored by maintainer bepri and successfully integrated.
qwen3.6-35b-a3b-mtp-q6 Merged by maintainer bepri to remove expired and resolved OSV scanner configuration from the CI pipeline. The change streamlines continuous integration by eliminating obsolete scanning rules.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#1299 ci: fix osv scanner on docs rockcraft merged Merged a configuration update to make the OSV scanner ignore documentation files. Approved by a reviewer, passed CI checks, and resolved scanner false positives in the docs directory with a single file change.
87%
#505 ci(osv-scanner): ignore integration tests starbase merged Merged CI configuration changes to configure osv-scanner to ignore integration tests, preventing false positive dependency warnings. Approved by two reviewers with all checks passing.
82%
#247 ci: ignore unfixable OSVs craft-platforms merged Merged a pull request adding a single configuration line to CI to ignore unfixable OSV scanner findings. The change passed all CI checks, received one approval, and was successfully integrated into the main branch.
81%
#6347 ci(scan): fix osv scanner on docs snapcraft merged Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue.
81%
#235 ci: update OSV scanner to match starbase craft-archives merged Merged changes to update the OSV scanner configuration, aligning it with the starbase repository. Approved by one reviewer, passed all CI checks, and modified four files to replicate upstream updates.
80%
#962 ci: ignore sample files in OSV scans rockcraft merged Merged CI configuration changes to ignore documentation and spread test sample files in OSV scans. Approved by two reviewers with all checks passing, preventing security alerts for demo-only content.
79%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed configuration via osv-extra-args, excluded docs from UV export, and added osv-scanner.toml. All CI checks passed.
79%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged. Corrected the OSV-scanner workflow config path to align with Starbase and excluded docs from scanning. Updated the uv lockfile for httplib2 and setuptools to resolve scanner failures. All CI checks passed.
78%
#1640 ci: align policy OSV scanner inputs craft-parts merged Merged. Aligns CI OSV scanner workflow inputs with starbase PR #573 by adding osv-scanner.toml, configuring extra args and excluded paths, and removing legacy requirements-find-args. No dependency updates required.
77%
#246 ci: ignore docs for CSVs craft-platforms merged Merged a CI configuration update to ignore documentation files during CSV processing. Approved by one reviewer and merged after passing most checks, despite one failing OSV-scanner job.
76%