This is an automated email from the ASF dual-hosted git repository. rusackas pushed a commit to branch fix/security/helm-lint-self-repository in repository https://gitbox.apache.org/repos/asf/superset.git
commit 699692dc24ed2ca039ce4cbfceee5875c88c0861 Author: rusackas <[email protected]> AuthorDate: Wed Sep 9 07:45:14 2026 -0700 fix(security): use self-repository syntax for chart-testing action ref Resolves code-scanning alert #2642 (zizmor/self-repository, note severity). superset-helm-lint-test.yml referenced the in-repo chart-testing-action composite action with the legacy workspace-relative syntax (uses: ./.github/actions/chart-testing-action). GitHub's dedicated self-repository syntax (uses: $/...) isn't subject to runtime filesystem state and is treated as a pinned reference for "fully pinned" policy enforcement. Co-Authored-By: Claude Sonnet 5 <[email protected]> --- .github/workflows/superset-helm-lint-test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/superset-helm-lint-test.yml b/.github/workflows/superset-helm-lint-test.yml index b58dc1a5673..6d714377583 100644 --- a/.github/workflows/superset-helm-lint-test.yml +++ b/.github/workflows/superset-helm-lint-test.yml @@ -49,7 +49,7 @@ jobs: # allowlist (only v8.1.0+ are, at apache/infrastructure-actions' # actions.yml). Needs an INFRA request before this can de-vendor too. - name: Set up chart-testing - uses: ./.github/actions/chart-testing-action + uses: $/.github/actions/chart-testing-action - name: Run chart-testing (list-changed) id: list-changed
