← Back to issue list

ci: remove config for osv scanner

View original Github issue

Metadata

Project
snapcraft
Number
#5487
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI.

Resolution: closed resolved

Reason: The pull request was merged into snapcraft as commit 866694712, deleting the obsolete OSV scanner configuration.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you followed the [guidelines for contributing](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md)? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint`? - [ ] Have you successfully run `make test`? --- Removes an OSV scanner config that was both resolved and expired.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI.
stealth/space-bunny-alpha — closed resolved Merged #5487 as commit 866694712, removing four lines of resolved, expired OSV scanner configuration from CI.
stealth/space-bunny-alpha — closed resolved Merged as 86669471 (#5487), removing four lines of resolved and expired OSV scanner configuration.
qwen/qwen3.6-35b-a3b — — Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge.
qwen3.6-35b-a3b-mtp-q6 — — Merged removal of expired and resolved OSV scanner configuration from the CI pipeline. The change was authored by maintainer bepri and successfully integrated.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged PR #1130 as commit 235a5cc0, correcting the OSV config path and excluding docs paths and docs-only dependency groups from security scans.
78%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed.
77%
#1299 ci: fix osv scanner on docs rockcraft merged Merged PR #1299 via commit c0191bb5, configuring OSV Scanner to ignore documentation-derived content and fix docs security scanning.
77%
#927 ci: clean up OSV workflows rockcraft closed Merged PR #927 as commit 2daac417, standardizing OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration.
75%
#2951 ci: exclude tests from OSV source scan charmcraft merged Merged PR #2951 (commit 5dc3fd6c) excluded test directories from OSV source scanning, removing test requirements and lock files; paired with merged dependency update #2950.
74%
#1498 ci(osv-scanner): ignore integration tests craft-parts merged Merged #1498 (commit 559a7daf), excluding tests/integration from OSV-Scanner inputs to prevent false-positive dependency findings.
73%
#508 ci: restore osv-scanner configuration in policy workflow craft-cli closed Merged PR #508 to restore OSV-scanner configuration in `.github/workflows/policy.yaml`, excluding `docs` from scans to prevent false positive vulnerability reports.
72%
#247 ci: ignore unfixable OSVs craft-platforms merged PR #247 merged into main, updating CI to ignore OSV findings with no available fix.
72%
#253 ci: align policy OSV scanner inputs with starbase craft-platforms merged Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed.
72%
#962 ci: ignore sample files in OSV scans rockcraft merged Merged PR #962 as commit e9b702cb to exclude documentation and spread-test sample files from OSV scans, avoiding findings for demo-only vulnerable versions.
72%