You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by "manuzhang (via GitHub)" <gi...@apache.org> on 2026/06/03 14:06:09 UTC
[PR] CI: Scope CVE scan PR triggers [iceberg]
manuzhang opened a new pull request, #16674:
URL: https://github.com/apache/iceberg/pull/16674
## Summary
- Add PR path filters to the CVE Scan workflow
- Trigger CVE Scan for build, dependency, Gradle, scan, and workflow configuration changes
- Avoid running the bundled artifact CVE scan for ordinary source-only PRs
## Why
The CVE Scan workflow builds bundled runtime artifacts and scans those artifacts for dependency vulnerabilities. Source-only changes typically do not affect the dependency set being scanned, so running the full matrix on every PR adds CI cost without improving CVE coverage.
## Validation
- Parsed `.github/workflows/cve-scan.yml` with Ruby YAML
- `git diff --check`
- `git diff --check upstream/main..HEAD`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] CI: Scope CVE scan PR triggers [iceberg]
Posted by "nssalian (via GitHub)" <gi...@apache.org>.
nssalian commented on PR #16674:
URL: https://github.com/apache/iceberg/pull/16674#issuecomment-4613856426
@manuzhang @kevinjqliu has a PR out for this https://github.com/apache/iceberg/pull/16513
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] CI: Scope CVE scan PR triggers [iceberg]
Posted by "manuzhang (via GitHub)" <gi...@apache.org>.
manuzhang closed pull request #16674: CI: Scope CVE scan PR triggers
URL: https://github.com/apache/iceberg/pull/16674
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org