rusackas opened a new pull request, #44131: URL: https://github.com/apache/superset/pull/44131
### SUMMARY Mechanical cleanup, `zizmor --fix=all` across `.github/workflows/*.yml`: replaces `./.github/actions/...` with `$/.github/actions/...` for local composite-action references that still used the older relative-path form. Every instance zizmor's `self-repository` audit flags has an auto-fix; this applies all of them in one pass rather than one at a time. One file (`scheduled-docker-image-refresh.yml`) references a second, sparse checkout of this same repo into a `workflow-source/` subdirectory (to get fresh `.github/actions` even when the primary checkout is pinned to an older release tag). `$/workflow-source/...` resolves the same way `./workflow-source/...` did — both are `GITHUB_WORKSPACE`-relative — so this is a like-for-like swap there too, not just in the common case. ### TESTING INSTRUCTIONS - `action-validator` passes on every changed file. - A full `zizmor .github/workflows/*.yml` re-scan reports **zero findings** (down from 47, all `self-repository`). ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
