kubeflow / trainer / 26100441005
62%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 40
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 62.134%. Remained the same
26100441005

push

github

web-flow 
feat(ci): add nightly OSV-Scanner vulnerability scan workflow (#3518)

* feat: add nightly OSV-Scanner vulnerability scan workflow

Adds a nightly GitHub Actions workflow that scans go.mod for known
vulnerabilities using OSV-Scanner, uploads SARIF results to the
Security tab, and auto-creates a PR with dependency fixes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fiona-Waters <fiwaters6@gmail.com>

* fix: address review feedback on osv-scanner workflow

- Use sort -V for semver-aware version deduplication instead of
  jq tonumber which mishandles pre-release suffixes
- Snapshot go.mod/go.sum per iteration so a failed fix only reverts
  itself, not previously successful updates

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fiona-Waters <fiwaters6@gmail.com>

* fix(ci): Address review comments for osv-scanner workflow

- Add set -euo pipefail to catch pipeline and unset variable errors
- Remove 2>/dev/null from jq call so schema drift is a hard failure
- Normalize OSV fix versions with sub("^v"; "") to prevent double v prefix
- Use ::warning:: annotations so skipped fixes surface in Actions UI
- Fix go list -m fallback to record fix version instead of silently skipping
- Remove redundant jq empty pre-check

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fiona-Waters <fiwaters6@gmail.com>

---------

Signed-off-by: Fiona-Waters <fiwaters6@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2184 of 3515 relevant lines covered (62.13%)

0.72 hits per line

Jobs
ID Job ID Ran Files Coverage
1 26100441005.1 40
62.13
 GitHub Action Run
Source Files on build 26100441005