ci: test new secscan action
Metadata
Current evaluation
PR #6303 tested a new secscan CI action but was closed unmerged after secscan, OSV-scanner, and multiple integration jobs failed.
Resolution: closed stale
Reason: The PR remained pending with two unresolved review threads and was closed unmerged after several required checks failed. No closing comment, replacement PR, or resolving commit was provided.
Evaluated by: mr-cal-bot
No scores available.
Issue body
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed stale | PR #6303 tested a new secscan CI action but was closed unmerged after secscan, OSV-scanner, and multiple integration jobs failed. | |
| stealth/space-bunny-alpha | — | closed stale | Testing of the new secscan action in Snapcraft #6303 was abandoned unmerged after secscan, OSV-scanner, and integration jobs failed. | |
| stealth/space-bunny-alpha |
Impact:
36
Quick Win:
8
Complexity:
30
Confidence:
89
Actionability:
30
|
needs review | Tests a new secscan action in Snapcraft CI; the 30-line workflow change remains unapproved, with secscan/OSV-scanner and all spread integration jobs failing. | |
| stealth/space-bunny-alpha |
Impact:
35
Quick Win:
9
Complexity:
30
Confidence:
76
Actionability:
35
|
needs review | Tests a new secscan action through a 30-line, one-file CI change. Open for 93 days with no reviews; secscan, OSV-scanner, and several integration checks are failing. | |
| qwen3.6-35b-a3b-mtp-q6 |
Impact:
35
Quick Win:
26
Staleness:
75
Complexity:
25
Confidence:
60
|
close stale | PR testing a new secscan CI action that is failing; inactive for 73 days with no maintainer engagement | |
| qwen/qwen3.6-35b-a3b |
Staleness:
25
Complexity:
20
Confidence:
85
|
needs review | Tests a new security scanning action in CI. Currently pending review with unresolved comments and some failing CI checks. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
45
Complexity:
10
Confidence:
75
|
needs review | Adds a CI workflow to test a new security scanning action. Currently awaiting maintainer review and CI validation. Lacks detailed description or comments. |
Update history
| Date | Change |
|---|---|
| closed |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #155 feat: new secscan action | starflow | open | Adds a reusable secscan action to run OSV/CVE scans on new tags or monthly against latest/stable. All CI checks green, but 17 review threads are unresolved and the cited snapcraft#6303 trial was closed unmerged after scan jobs failed. | |
| #5898 ci: test new action | snapcraft | closed | PR #5898 tested a new CI action with a one-line change but was closed unmerged after integration-spread and publish checks failed; no replacement was identified. | |
| #373 ci: test on resolute | craft-store | closed | PR #373 was closed unmerged after approval; OSV-scanner remained failing and two review comments were unresolved. | |
| #494 ci: add security scanning job | craft-application | merged | PR #494 was merged as 0b10cf66, adding a 15-line CI job for automated security scanning. | |
| #859 ci: add security scanning job | craft-parts | merged | Merged PR #859 added a 15-line CI security-scanning job; the change landed in commit 19ec5517. | |
| #233 ci: add security scanner job | fetch-service | merged | Merged PR #233 as commit 3dadebe, adding a TIOBE TICS security-scanner CI job; called findings fail the job, while uncalled warnings remain non-fatal. |