← Back to issue list

ci(scan): fix osv scanner on docs

View original Github issue

Metadata

Project
snapcraft
Number
#6347
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue.

Suggested action: —

No scores available.

Issue body

Pulls in the changes from https://github.com/canonical/starbase/pull/573 --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue.
qwen3.6-35b-a3b-mtp-q6
Staleness: 5
Complexity: 15
Confidence: 90
needs review Updates CI configuration to fix the OSV scanner on documentation builds by syncing changes from starbase PR #573. Currently awaiting initial review and CI validation.

Update history

Date Change
updated

Related issues

Issue Project State Summary Similarity
#1299 ci: fix osv scanner on docs rockcraft merged Merged a configuration update to make the OSV scanner ignore documentation files. Approved by a reviewer, passed CI checks, and resolved scanner false positives in the docs directory with a single file change.
88%
#5487 ci: remove config for osv scanner snapcraft merged Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge.
81%
#988 ci: fix OSV scanner policy workflow craft-providers merged Merged fix for OSV scanner policy workflow failures. Updated scan-python inputs, passed configuration via osv-extra-args, excluded docs from UV export, and added osv-scanner.toml. All CI checks passed.
80%
#2821 ci: fix osv workflow errors charmcraft merged Merged fix for CI OSV workflow errors by updating the cryptography dependency. Approved by two reviewers and passed all required checks, successfully restoring the security scanning pipeline.
79%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged. Corrected the OSV-scanner workflow config path to align with Starbase and excluded docs from scanning. Updated the uv lockfile for httplib2 and setuptools to resolve scanner failures. All CI checks passed.
78%
#157 ci(scan): allow ignoring files/directories starflow merged Merged after approval and passing CI. Enables the OSV scanner to ignore specified files and directories, deferring documentation dependency fixes to the Sphinx Stack and Starbase update pipeline.
78%
#160 fix(scan): fix path resolution for osv-scanner file arguments starflow merged Merged fix for osv-scanner path resolution. Removes the required source/ prefix in osv-extra-args, enabling direct config file references. Approved by one reviewer and passed CI checks prior to merge.
77%
#962 ci: ignore sample files in OSV scans rockcraft merged Merged CI configuration changes to ignore documentation and spread test sample files in OSV scans. Approved by two reviewers with all checks passing, preventing security alerts for demo-only content.
76%
#200 ci: align policy OSV scan inputs with starbase craft-grammar merged Merged. Updated CI workflow to align OSV security scan inputs with starbase, added a root config file, and excluded docs from scans. All CI checks passed.
75%
#235 ci: update OSV scanner to match starbase craft-archives merged Merged changes to update the OSV scanner configuration, aligning it with the starbase repository. Approved by one reviewer, passed all CI checks, and modified four files to replicate upstream updates.
75%