[Report issue] metal3-io

[jonathimer]

Page

https://insights.linuxfoundation.org/project/metal3/repository/metal3-io-community/security

Project

metal3-io

Describe the issue

OSPS-QA-02.01 wants to find package.lock or go.mod in our community repo.

Steps to reproduce

https://insights.linuxfoundation.org/project/metal3/repository/metal3-io-community/security

FAILED: Reason: No dependency manifests found in the repository by the GitHub API

Expected vs. actual behavior

Not every repo will have lock files.

---

Jira Issue: DE-878

[tuminoid]

Another funny failure in OSPS checks affecting all non-lockfile repos.

[Debasishpradhan28]

Hi, I’d like to work on this issue.
From my understanding, the repository appears to be documentation-only, and the scanner should gracefully handle repos without dependency manifests instead of marking them as failed.
Please let me know if I can work on this?