feat: Security scanner
Metadata
Current evaluation
Maintainer-authored PR adding a secscan-API security scanner workflow (+106/-0, 2 files). Author states it does not work yet pending runner access; no reviewers, no CI, no activity for ~665 days.
Suggested action: keep open
Reason: The PR is explicitly self-blocked on an external dependency — the body says "Doesn't work yet because we don't have runners with access" — and there is zero review activity (0 reviewers, 0 comments, no CI checks at all), so nothing has been validated. It is not superseded or obsolete: the related-issue search surfaced only this PR, no later security-scanner PR or commit, so merging-in-place via another change is not evidenced. Given 665 days of inactivity but no maintainer rejection or architectural divergence, keep it open pending a runner-access decision rather than closing as stale.
Evaluated by: mr-cal-bot
Issue body
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
25
Quick Win:
4
Complexity:
25
Confidence:
68
Actionability:
20
|
keep open | Maintainer-authored PR adding a secscan-API security scanner workflow (+106/-0, 2 files). Author states it does not work yet pending runner access; no reviewers, no CI, no activity for ~665 days. | |
| qwen/qwen3.6-35b-a3b |
Impact:
10
Quick Win:
0
Complexity:
15
Confidence:
85
Actionability:
0
|
close stale | Adds a security scanner workflow using the secscan API. PR is incomplete and non-functional due to missing runner access. No activity for 655 days, no reviewers, no CI checks. | |
| qwen/qwen3.8-27b |
Impact:
30
Quick Win:
24
Staleness:
90
Complexity:
20
Confidence:
55
|
close stale | Adds a security scanner GitHub workflow using the secscan API; author notes it doesn't work yet because runners lack access. Pending review, no CI, no comments, inactive for ~19 months. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
90
Complexity:
40
Confidence:
75
|
close stale | Adds a security scanner feature using the secscan API. Currently inactive for over a year, unreviewed, and non-functional due to missing runner access. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
95
Complexity:
20
Confidence:
90
|
close stale | Adds a security scanner using the secscan API but remains non-functional due to missing runner access. Inactive for over 1.5 years with zero comments or maintainer engagement. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #56 ci: add security scanning workflow | craft-grammar | merged | Merged security-scanning CI workflow via PR #56, recorded in commit a6f1a1d. | |
| #5068 ci: add security scan | snapcraft | merged | Merged PR #5068 in commit 040b66c00, adding CI security scanning across six files after approval by two reviewers. | |
| #1924 ci: add security scan workflow | charmcraft | merged | Merged #1924 in commit 5634ecb1, adding the CI security-scan workflow after syncing canonical/craft-archives#128; two reviewers approved it. | |
| #218 ci: add security scan workflow | craft-store | merged | Merged PR #218 via commit db9a779, adding a 13-line GitHub Actions security-scan workflow after two approvals; no CI checks were reported. | |
| #9 feat: golang security scanner | starflow | merged | Merged Go security scanning via PR #9 (commit 5ff0e00), adding a reusable OSV-scanner workflow and self-test integration. | |
| #128 ci: add security scan workflow | craft-archives | merged | Merged security-scan workflow in canonical/craft-archives#128 via commit 70b7abb, adding automated security scanning to CI. |