← Back to issue list

ci(scan): fix osv scanner on docs

View original Github issue

Metadata

Project
snapcraft
Number
#6347
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning.

Resolution: closed resolved

Reason: PR #6347 merged with commit 5bb3aff7d. It ported canonical/starbase#573, adding OSV-scanner exclusions for documentation inputs.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Pulls in the changes from https://github.com/canonical/starbase/pull/573 --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged in snapcraft#6347 as 5bb3aff7d, porting starbase#573 to add OSV exclusions so documentation inputs no longer fail security scanning.
stealth/space-bunny-alpha — closed resolved Merged as snapcraft#6347 (commit 5bb3aff7d), porting canonical/starbase#573 to configure OSV exclusions and prevent documentation inputs from failing the security scan.
qwen/qwen3.6-35b-a3b — — Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue.
qwen3.6-35b-a3b-mtp-q6
Staleness: 5
Complexity: 15
Confidence: 90
needs review Updates CI configuration to fix the OSV scanner on documentation builds by syncing changes from starbase PR #573. Currently awaiting initial review and CI validation.

Update history

Date Change
updated

Related work

  • Likely Fixed By: canonical/starbase#573 (confidence 99%)

    Its OSV-scanner documentation exclusion changes were ported into Snapcraft by the merged PR.

Related issues

Issue Project State Summary Similarity
#157 ci(scan): allow ignoring files/directories starflow merged Merged #157, adding configurable OSV-scanner exclusions so docs dependencies are ignored. All CI passed; docs fixes are deferred to the Sphinx Stack and Starbase update pipeline.
79%
#1299 ci: fix osv scanner on docs rockcraft merged Merged PR #1299 via commit c0191bb5, configuring OSV Scanner to ignore documentation-derived content and fix docs security scanning.
78%
#235 ci: update OSV scanner to match starbase craft-archives merged Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed.
78%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged as e6a3482: updated OSV scanner inputs and config, excluded docs paths/groups, and added osv-scanner.toml. All CI checks passed.
77%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged PR #1130 as commit 235a5cc0, correcting the OSV config path and excluding docs paths and docs-only dependency groups from security scans.
77%
#253 ci: align policy OSV scanner inputs with starbase craft-platforms merged Merged PR (canonical/craft-platforms#253) aligned policy.yaml OSV scanner inputs with starbase: added osv-extra-args/--config=osv-scanner.toml, osv-exclude-paths, uv-export-no-groups, dropped requirements-find-args, added root osv-scanner.toml. All CI checks passed.
76%
#927 ci: clean up OSV workflows rockcraft closed Merged PR #927 as commit 2daac417, standardizing OSV scanner arguments with Snapcraft and Charmcraft and removing outdated configuration.
76%
#200 ci: align policy OSV scan inputs with starbase craft-grammar merged Merged PR #200 as commit c359e99, adding osv-scanner.toml and aligning policy OSV inputs with starbase by excluding docs and skipping docs UV groups.
75%
#1640 ci: align policy OSV scanner inputs craft-parts merged PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml.
74%
#199 ci: align policy OSV scan inputs with starbase craft-grammar closed Closed unmerged as superseded; canonical/craft-grammar#200 merged the same OSV workflow and scanner-config changes in commit c359e99.
74%