From d16d17d2d28f56cb0775a8c42ebc95b8ccf4f032 Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Fri, 18 Sep 2026 13:15:17 -0700
Subject: [PATCH] ci(osv-scan): scan the VS Code extension lockfile

---
 .github/workflows/osv-scan.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/osv-scan.yml b/.github/workflows/osv-scan.yml
index 31104002dab..0aedeaec12a 100644
--- a/.github/workflows/osv-scan.yml
+++ b/.github/workflows/osv-scan.yml
@@ -41,4 +41,5 @@ jobs:
           "$RUNNER_TEMP/osv-scanner" scan source \
             --config osv-scanner.toml \
             -L uv.lock \
-            -L ui/litellm-dashboard/package-lock.json
+            -L ui/litellm-dashboard/package-lock.json \
+            -L vscode-extension/package-lock.json