This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new 362d3509cb0 fix(security): suppress zizmor self-repository false
positive for cached-dependencies in presto-hive workflow (#43984)
362d3509cb0 is described below
commit 362d3509cb0fd3a9404453574b951447b44835d8
Author: Evan Rusackas <[email protected]>
AuthorDate: Tue Sep 8 16:53:23 2026 -0700
fix(security): suppress zizmor self-repository false positive for
cached-dependencies in presto-hive workflow (#43984)
---
.github/workflows/superset-python-presto-hive.yml | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/superset-python-presto-hive.yml
b/.github/workflows/superset-python-presto-hive.yml
index 131f241267a..f8c9159dbc9 100644
--- a/.github/workflows/superset-python-presto-hive.yml
+++ b/.github/workflows/superset-python-presto-hive.yml
@@ -82,7 +82,13 @@ jobs:
- name: Setup Python
uses: $/.github/actions/setup-backend/
- name: Setup Postgres
- uses: ./.github/actions/cached-dependencies
+ # cached-dependencies is a submodule (not a plain directory), and
+ # the $/ self-repository syntax resolves action files directly from
+ # the repository without performing a real (submodule-aware)
+ # checkout, so it can't see into a submodule's link. Keep this one
+ # on the workspace-relative ./ form, consistent with every other
+ # workflow in the repo that references this action.
+ uses: ./.github/actions/cached-dependencies # zizmor:
ignore[self-repository] - $/ cannot resolve an action that lives in a
submodule; ./ is required here
with:
run: setup-postgres
- name: Start Celery worker
