This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git


The following commit(s) were added to refs/heads/master by this push:
     new fa31e9c1c32 fix(security): suppress zizmor self-repository false 
positive for cached-dependencies (#43972)
fa31e9c1c32 is described below

commit fa31e9c1c325c5e262574f2794f7c57ec84b22dc
Author: Evan Rusackas <[email protected]>
AuthorDate: Tue Sep 8 16:52:42 2026 -0700

    fix(security): suppress zizmor self-repository false positive for 
cached-dependencies (#43972)
    
    Co-authored-by: Claude Sonnet 5 <[email protected]>
---
 .github/workflows/superset-translations.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/superset-translations.yml 
b/.github/workflows/superset-translations.yml
index a8a0d61b7cc..605953453c2 100644
--- a/.github/workflows/superset-translations.yml
+++ b/.github/workflows/superset-translations.yml
@@ -51,7 +51,7 @@ jobs:
         # checkout, so it can't see into a submodule's gitlink. Keep this one
         # on the workspace-relative ./ form, consistent with every other
         # workflow in the repo that references this action.
-        uses: ./.github/actions/cached-dependencies
+        uses: ./.github/actions/cached-dependencies # zizmor: 
ignore[self-repository] - $/ cannot resolve an action that lives in a 
submodule; ./ is required here
         with:
           run: npm-install
       - name: lint

Reply via email to