remove setup-osv-scanner

.gitea/workflows/ci.yaml

@@ -4,35 +4,28 @@ on:
   pull_request:
 
 jobs:
-  test-setup-osv-scanner:
-    strategy:
-      matrix:
-        arch: [ amd64, arm64 ]
-    name: Test Setup OSV-Scanner ${{ matrix.arch }}
-    runs-on:
-      - ubuntu-latest
-      - linux_${{ matrix.arch }}
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Setup OSV-Scanner
-        uses: ./setup-osv-scanner
-      - name: Run OSV-Scanner
-        run: osv-scanner --version
-
   test-setup-osv-db:
     name: Test Setup OSV offline DB
     runs-on:
       - ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ./setup-osv-scanner
       - name: Setup offline DB
         id: setup-db
         uses: ./setup-osv-db
-      - name: Run OSV-Scanner with cached DB
-        env:
-          OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY: ${{ steps.setup-db.outputs.cache-dir }}
-        run: osv-scanner scan source --offline-vulnerabilities --allow-no-lockfiles -r .
+      - name: Verify DB zips exist
+        shell: bash
+        run: |
+          set -euo pipefail
+          root="${{ steps.setup-db.outputs.cache-dir }}/osv-scanner"
+          [ -d "$root" ] || { echo "FAIL: missing directory $root"; exit 1; }
+          n=0
+          while IFS= read -r -d '' f; do
+            [ -s "$f" ] || { echo "FAIL: empty or missing: $f"; exit 1; }
+            n=$((n + 1))
+          done < <(find "$root" -type f -name all.zip -print0)
+          [ "$n" -ge 1 ] || { echo "FAIL: no all.zip under $root"; exit 1; }
+          echo "OK: $n non-empty all.zip file(s) under $root"
 
   test-get-images-from-files:
     name: Test Get Images From Files