1
62%
master: 66%

Ran 19 May 2026 02:32PM UTC

Files 40

Run time 3s

Badge

Embed ▾

Committed 19 May 2026 02:17PM UTC coverage: 62.134%. Remained the same

Job # 26103795805.1

Build Type

Pull #3530

github

Committed by

Fiona-Waters

Commit Message

feat(ci): add Python dependency scanning to OSV-Scanner workflow

Add lockfiles and scanning for Python dependencies in the initializers
and python_api. This extends the nightly OSV-Scanner workflow to cover
Python in addition to Go.

- Generate requirements-lock.txt files via pip-compile for:
  - cmd/initializers/dataset/
  - cmd/initializers/model/
  - api/python_api/
- Add osv-scan-python job with SARIF scanning and auto-fix
- Add validate-lockfile.yaml to ensure lockfiles stay in sync on PRs
- Handle both direct and transitive dependency upgrades

Closes #3528

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fiona-Waters <fiwaters6@gmail.com>

Pull Request Pull Request #3530: feat(ci): add Python dependency scanning to OSV-Scanner workflow

Coverage Stats

2184 of 3515 relevant lines covered (62.13%)

0.72 hits per line

kubeflow / trainer / 26103795805 / 1
62%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26103795805.1

kubeflow / trainer / 26103795805 / 1 62% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26103795805.1

kubeflow / trainer / 26103795805 / 1
62%
master: 66%

README BADGES
x