(superset) branch master updated: fix(security): suppress zizmor self-repository false positive for playwright install step (#44074)

[hainenber]

This is an automated email from the ASF dual-hosted git repository.

hainenber pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git


The following commit(s) were added to refs/heads/master by this push:
     new 4aca0d7da41 fix(security): suppress zizmor self-repository false 
positive for playwright install step (#44074)
4aca0d7da41 is described below

commit 4aca0d7da4188fc373208aef3850d576a7917ae5
Author: Evan Rusackas <e...@preset.io>
AuthorDate: Wed Sep 9 08:32:29 2026 -0700

    fix(security): suppress zizmor self-repository false positive for 
playwright install step (#44074)
    
    Co-authored-by: Claude Sonnet 5 <nore...@anthropic.com>
---
 .github/workflows/superset-playwright.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/superset-playwright.yml 
b/.github/workflows/superset-playwright.yml
index c34e809a5b2..b94b7c903f6 100644
--- a/.github/workflows/superset-playwright.yml
+++ b/.github/workflows/superset-playwright.yml
@@ -151,7 +151,12 @@ jobs:
         with:
           run: build-instrumented-assets
       - name: Install Playwright
-        uses: ./.github/actions/cached-dependencies
+        # the $/ self-repository syntax resolves action files directly from
+        # the repository without performing a real (submodule-aware)
+        # checkout, so it can't see into a submodule's gitlink. Keep this one
+        # on the workspace-relative ./ form, consistent with every other
+        # workflow in the repo that references this action.
+        uses: ./.github/actions/cached-dependencies # zizmor: 
ignore[self-repository] - $/ cannot resolve an action that lives in a 
submodule; ./ is required here
         with:
           run: playwright-install
       - name: Run Playwright (Experimental Tests)