Skip to content

feat: Update osv-scanner to use osv-scalibr osvecosystem#2211

Merged
another-rex merged 5 commits into
google:mainfrom
another-rex:update-scalibr-to-use-eco
Sep 11, 2025
Merged

feat: Update osv-scanner to use osv-scalibr osvecosystem#2211
another-rex merged 5 commits into
google:mainfrom
another-rex:update-scalibr-to-use-eco

Conversation

@another-rex

@another-rex another-rex commented Aug 29, 2025

Copy link
Copy Markdown
Collaborator

OSV-Scalibr added the osvecosystem.Parsed type into their library and is now properly returned from all the relevant functions. use that and delete the existing ecosystem.Parsed.

@another-rex another-rex requested a review from cuixq August 29, 2025 05:06
@codecov-commenter

codecov-commenter commented Sep 1, 2025

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 52.17391% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 67.52%. Comparing base (18100e2) to head (d3c99e8).
⚠️ Report is 7 commits behind head on main.

Files with missing lines Patch % Lines
internal/imodels/imodels.go 42.85% 6 Missing and 2 partials ⚠️
cmd/osv-scanner/fix/command.go 0.00% 1 Missing ⚠️
...al/clients/clientimpl/localmatcher/localmatcher.go 50.00% 1 Missing ⚠️
pkg/osvscanner/filter.go 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2211      +/-   ##
==========================================
- Coverage   67.62%   67.52%   -0.10%     
==========================================
  Files         170      169       -1     
  Lines       16336    16283      -53     
==========================================
- Hits        11047    10995      -52     
  Misses       4609     4609              
+ Partials      680      679       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@another-rex another-rex merged commit 13a7f54 into google:main Sep 11, 2025
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants