You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ru...@apache.org on 2026/09/09 01:48:02 UTC

(superset) branch fix/security-self-repository-integrationtest-setup-postgres created (now 3c3c92e96b3)

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a change to branch fix/security-self-repository-integrationtest-setup-postgres
in repository https://gitbox.apache.org/repos/asf/superset.git


      at 3c3c92e96b3 fix(security): use self-repository syntax for setup-backend in postgres job

This branch includes the following new commits:

     new 3c3c92e96b3 fix(security): use self-repository syntax for setup-backend in postgres job

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(superset) 01/01: fix(security): use self-repository syntax for setup-backend in postgres job

Posted by ru...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch fix/security-self-repository-integrationtest-setup-postgres
in repository https://gitbox.apache.org/repos/asf/superset.git

commit 3c3c92e96b3c0292ae7d5492ad26f83f14074bc5
Author: rusackas <ev...@rusackas.com>
AuthorDate: Tue Sep 8 18:25:50 2026 -0700

    fix(security): use self-repository syntax for setup-backend in postgres job
    
    zizmor's self-repository audit flags uses: ./.github/actions/setup-backend/
    in the test-postgres job in favor of GitHub's dedicated uses: $/... syntax.
    This mirrors the mechanical fix already applied to the analogous
    setup-backend references in this same workflow (test-sqlite, #44018) and in
    superset-python-presto-hive.yml (#43975), now that the ASF allowlist check
    has been bumped to recognize $/ refs (#44014).
    
    Resolves code-scanning alert #2656.
    
    Co-Authored-By: Claude Sonnet 5 <no...@anthropic.com>
---
 .github/workflows/superset-python-integrationtest.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/superset-python-integrationtest.yml b/.github/workflows/superset-python-integrationtest.yml
index 5a9cc6c3863..9f06dc08c63 100644
--- a/.github/workflows/superset-python-integrationtest.yml
+++ b/.github/workflows/superset-python-integrationtest.yml
@@ -160,7 +160,7 @@ jobs:
           persist-credentials: false
           submodules: recursive
       - name: Setup Python
-        uses: ./.github/actions/setup-backend/
+        uses: $/.github/actions/setup-backend/
         with:
           python-version: ${{ matrix.python-version }}
       - name: Setup Postgres