Skip to content

feat: update osv-scalibr #9452

feat: update osv-scalibr

feat: update osv-scalibr #9452

Triggered via pull request April 10, 2026 19:10
Status Success
Total duration 2m 53s
Artifacts

codeql-analysis.yml

on: pull_request
Matrix: Analyze
Fit to window
Zoom out
Zoom in

Annotations

4 errors and 1 warning
Analyze (go)
impossible type assertion: pkg.Metadata.(*osvscannerjson.Metadata)
Analyze (go)
cannot use insightsClient (variable of interface type v3alpha.InsightsClient) as *grpcclient.Config value in argument to baseimage.NewClientGRPC
Analyze (go)
undefined: baseimage.Config
Analyze (go)
cannot use &Metadata{…} (value of type *Metadata) as "github.com/google/osv-scalibr/binary/proto/metadata".Protoable value in struct literal: *Metadata does not implement "github.com/google/osv-scalibr/binary/proto/metadata".Protoable (missing method IsProtoable)
Analyze (go)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.