This is an automated email from the ASF dual-hosted git repository. vatsrahul1001 pushed a commit to branch fix-zizmor-allowlist-pin-v3-3-test in repository https://gitbox.apache.org/repos/asf/airflow.git
commit ef0187127f99d13da8c0524e0939cfc04bf6bce5 Author: Rahul Vats <[email protected]> AuthorDate: Sun Sep 13 08:47:39 2026 +0530 Pin apache/infrastructure-actions allowlist-check to a released tag The action was pinned to a hash carrying a '# main' comment, which zizmor's online ref-version-mismatch audit flags (a branch is not a version). Pin to the released allowlist-check/v1.0.0 tag, matching main (#70623). This was the last static-check failure on the 3.3.2 sync PR after the ruff/mypy restore (#73046). --- .github/workflows/asf-allowlist-check.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml index 00e962f24c7..058c5aca453 100644 --- a/.github/workflows/asf-allowlist-check.yml +++ b/.github/workflows/asf-allowlist-check.yml @@ -31,4 +31,5 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: apache/infrastructure-actions/allowlist-check@ec1b354a0455b41001d77473236d02a0ee0adba4 # main + # yamllint disable-line rule:line-length + - uses: apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0 # allowlist-check/v1.0.0
