ci: update usage of starflow security scanner
Metadata
Current evaluation
PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files).
Resolution: closed resolved
Reason: The PR itself was merged into main as commit c4133af ('ci: update usage of starflow security scanner (#573)') after 2 approvals with all checks passing, including Security scan / OSV-scanner.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Updates the `python-scans` job in `policy.yaml` to use the newest configuration options of starflow's security scanner, including an `osv-scanner.toml` configuration placeholder and adding exclude paths.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). | |
| stealth/space-bunny-alpha | — | closed resolved | PR canonical/starbase#573 by lengau merged into main with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to the newest starflow security-scanner options: added an osv-scanner.toml config placeholder and exclude paths (+7/-1, 2 files). | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after two approvals and passing CI. Updated the python-scans job in policy.yaml to use new starflow security scanner options, adding an osv-scanner.toml placeholder and path exclusions. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
15
Confidence:
90
|
needs review | Updates the python-scans CI job to use newer starflow security scanner options, adds an osv-scanner.toml placeholder, and configures exclude paths. Currently awaiting review. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #2027 build(ci): use starflow for policy and security scans | charmcraft | merged | Merged PR #2027 as ad40ba4d (implementation bdc9a0a1), switching CI policy and security scans to Starflow after two approvals and a rebase onto main. | |
| #1915 ci: add security scans | charmcraft | closed | Closed unmerged in favor of Starflow-based CI security scanning; #1924 landed the workflow, and #2027 later completed the explicit Starflow migration. | |
| #55 ci: automatic security scans | craft-platforms | merged | Merged PR #55 added an automated Starflow-based security scan workflow for the project. | |
| #52 ci: automatic security scans | craft-platforms | closed | Security scanning moved to canonical/starflow; unmerged PR #52 was superseded by merged PR #55 in commit 06de25b. | |
| #861 ci: use starflow policy checker | craft-parts | closed | Closed unmerged; Starflow policy-scanner work later landed in PR #573 via commit c4133af4. | |
| #82 ci: align policy scan inputs with starbase | craft-actions | closed | Closed unmerged: the PR added .github/workflows/policy.yaml plus osv-scanner.toml to align scan-python inputs with canonical/starbase#573. lengau closed it 2026-07-14 as unnecessary. | |
| #81 ci: align policy scan inputs with starbase PR 573 | craft-actions | closed | PR #81 (add policy.yaml + osv-scanner.toml, align scan-python inputs with starbase#573) was closed unmerged by maintainer lengau, superseded by #82 which used the required work/fix-osv head branch. | |
| #60 ci: use starflow policy and QA workflows | craft-platforms | merged | Merged into main as commit ab5f54e, replacing project-specific CI configuration with Canonical Starflow policy and QA workflows across eight files. | |
| #235 ci: update OSV scanner to match starbase | craft-archives | merged | Merged PR #235, updating craft-archives’ OSV security-scan CI to match canonical/starbase#573; all reported checks passed. | |
| #1640 ci: align policy OSV scanner inputs | craft-parts | merged | PR #1640 merged as commit 159bad0d, aligning .github/workflows/policy.yaml OSV inputs with starbase #573: added osv-extra-args/exclude-paths, uv-export-no-groups, removed requirements-find-args, added root osv-scanner.toml. |