Repository navigation
osv: one issue a package, closed once a release has no finding in it - #197
Merged
Merged
Conversation
osv.yml opened an issue per finding and never closed one: 77 open, 19 of them curl's, which one Ubuntu version fixes, and USN-8927-1 beside the CVEs it names. hack/osvissues keeps one issue a package instead - its body the findings in the newest release, rewritten as they change - and closes it when the release has none. A closed issue is an answer and stays closed until a finding it did not list appears. The search index lags the issues, so the tool lists every issue rather than searching for them, or a run soon after another opens the same issue again. Plants: a closed issue not reopened by a new finding, the oldest issue of a title taken for the package's, per-finding titles closed as packages, and -n acting each fail a test. Mutate: 46 refused, 0 survived. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This was referenced Oct 19, 2026
This was referenced Oct 19, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
osv.ymlopened one issue per finding and never closed any. That left 77 open issues: 19 for curl, which a single Ubuntu version fixes, and USN-8927-1 beside the CVEs it names.hack/osvissuesreplaces the shell step:osv: curl), whose body lists the newest release's findings and is rewritten as they change;It lists every issue rather than searching, because the search index lags behind new issues.
A dry run against today's issues gives 12 creates, down from 77. After merge I'll dispatch osv.yml once and close the 77 per-finding issues as folded into their package's issue.
Plants all fail a test.
task mutate: 46 refused, 0 survived.task lintis green.🤖 Generated with Claude Code
Need help on this PR? Tag
@codesmith-botwith what you need.