feat: Python project scan reusable workflow
Metadata
Current evaluation
Merged the reusable Python project security-scan workflow in canonical/starflow#3 at commit 41c1942, adding 231 lines across two files.
Resolution: closed resolved
Reason: PR canonical/starflow#3 was merged into the project as commit 41c1942, delivering the reusable Python project scan workflow.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Examples of this working:
1. https://github.com/canonical/craft-platforms/pull/55 (https://github.com/canonical/craft-platforms/actions/runs/11040304469?pr=55)
2. https://github.com/canonical/charmcraft/pull/1924 (https://github.com/canonical/charmcraft/actions/runs/11042023040/job/30673655288?pr=1924)
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged the reusable Python project security-scan workflow in canonical/starflow#3 at commit 41c1942, adding 231 lines across two files. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #3 added a reusable GitHub Actions workflow for Python project security scanning in commit 41c1942. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/starflow#3 added a reusable GitHub Actions workflow for scanning Python projects, changing two files with 231 added lines. | |
| qwen/qwen3.6-35b-a3b | — | — | Successfully merged a reusable GitHub Actions workflow for scanning Python projects. The maintainer implemented the feature across two files (+231 lines), with functionality validated through examples in external repositories. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a reusable GitHub Actions workflow for scanning Python projects. The change adds automated scanning capabilities, validated via successful deployments in external repositories. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/craft-platforms#55
(confidence 95%)
Cited as a successful consumer example of the reusable workflow.
-
Related To:
canonical/charmcraft#1924
(confidence 95%)
Cited as a successful consumer example of the reusable workflow.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #14 feat: golang security scanner | starflow | closed | Go security scanner proposal was closed unmerged and superseded by canonical/starflow#9, which added the workflow in commit 5ff0e00. | |
| #55 ci: automatic security scans | craft-platforms | merged | Merged PR #55 added an automated Starflow-based security scan workflow for the project. | |
| #18 feat: python test, lint and policy check workflows | starflow | merged | Merged Python CI workflows for tests, lint, and policy checks, with README usage guidance, in canonical/starflow#18 (commit cd64717). | |
| #1915 ci: add security scans | charmcraft | closed | Closed unmerged in favor of Starflow-based CI security scanning; #1924 landed the workflow, and #2027 later completed the explicit Starflow migration. | |
| #357 ci: delete duplicate workflow | craft-store | merged | PR #357 merged (commit 43767c0) removing .github/workflows/security-scan.yaml, added earlier in #218, as duplicate; the "Security scan" python-scans job already runs in policy.yaml via canonical/starflow. | |
| #573 ci: update usage of starflow security scanner | starbase | merged | PR #573 by lengau merged into main (commit c4133af) with 2 approvals and all CI green. Bumped the python-scans job in policy.yaml to newest starflow security-scanner options, adding an osv-scanner.toml placeholder and exclude paths (+7/-1, 2 files). |