← Back to issue list

ci(scan): allow ignoring files/directories

View original Github issue

Metadata

Project
starflow
Number
#157
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged after approval and passing CI. Enables the OSV scanner to ignore specified files and directories, deferring documentation dependency fixes to the Sphinx Stack and Starbase update pipeline.

Suggested action: —

No scores available.

Issue body

From the docs sync discussion, this change will make the OSV scanner ignore all docs issues moving forward. The intended path for fixes now will be: - All docs dependencies come from Sphinx Stack - Sphinx Stack will patch these through its own OSV alerts - Starbase will adopt new versions of Sphinx Stack - Repositories will update Starbase, which gets them these patches.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged after approval and passing CI. Enables the OSV scanner to ignore specified files and directories, deferring documentation dependency fixes to the Sphinx Stack and Starbase update pipeline.
qwen3.6-35b-a3b-mtp-q6
Staleness: 15
Complexity: 25
Confidence: 90
keep open Draft PR adding CI configuration to allow OSV scanner to ignore specific files and directories. Currently blocked on simplifying the workflow via PR #159 before finalizing fixes.
qwen3.6-35b-a3b-mtp-q6
Staleness: 5
Complexity: 15
Confidence: 90
needs review Modifies CI configuration to exclude the docs/ directory from Python dependency scanning. Aligns dependency management with Sphinx Stack and Starbase workflows. Currently awaiting review.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#962 ci: ignore sample files in OSV scans rockcraft merged Merged CI configuration changes to ignore documentation and spread test sample files in OSV scans. Approved by two reviewers with all checks passing, preventing security alerts for demo-only content.
79%
#6347 ci(scan): fix osv scanner on docs snapcraft merged Merged after approval. The change updates the CI pipeline to fix the OSV security scanner for documentation builds, resolving the scanning configuration issue.
78%
#1299 ci: fix osv scanner on docs rockcraft merged Merged a configuration update to make the OSV scanner ignore documentation files. Approved by a reviewer, passed CI checks, and resolved scanner false positives in the docs directory with a single file change.
76%
#247 ci: ignore unfixable OSVs craft-platforms merged Merged a pull request adding a single configuration line to CI to ignore unfixable OSV scanner findings. The change passed all CI checks, received one approval, and was successfully integrated into the main branch.
74%
#246 ci: ignore docs for CSVs craft-platforms merged Merged a CI configuration update to ignore documentation files during CSV processing. Approved by one reviewer and merged after passing most checks, despite one failing OSV-scanner job.
74%
#1640 ci: align policy OSV scanner inputs craft-parts merged Merged. Aligns CI OSV scanner workflow inputs with starbase PR #573 by adding osv-scanner.toml, configuring extra args and excluded paths, and removing legacy requirements-find-args. No dependency updates required.
73%
#1498 ci(osv-scanner): ignore integration tests craft-parts merged Merged to configure OSV-scanner to ignore integration tests, preventing false positive dependency alerts. Approved by two reviewers and upstreamed to canonical/starbase.
73%
#505 ci(osv-scanner): ignore integration tests starbase merged Merged CI configuration changes to configure osv-scanner to ignore integration tests, preventing false positive dependency warnings. Approved by two reviewers with all checks passing.
72%
#5487 ci: remove config for osv scanner snapcraft merged Merged after approval by two reviewers. Removed expired OSV scanner configuration from CI. Updated one file with a four-line reduction. All required CI checks passed prior to merge.
72%
#1130 ci: fix OSV-scanner workflow path and exclude docs-only inputs craft-application merged Merged. Corrected the OSV-scanner workflow config path to align with Starbase and excluded docs from scanning. Updated the uv lockfile for httplib2 and setuptools to resolve scanner failures. All CI checks passed.
72%