(superset) branch master updated: fix(security): suppress zizmor self-repository false positive for playwright experimental step (#44064)

[ha...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

hainenber pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git


The following commit(s) were added to refs/heads/master by this push:
     new 9267d8b6669 fix(security): suppress zizmor self-repository false positive for playwright experimental step (#44064)
9267d8b6669 is described below

commit 9267d8b6669832bca325448a61f7e6c4ab2940c5
Author: Evan Rusackas <ev...@preset.io>
AuthorDate: Wed Sep 9 08:33:33 2026 -0700

    fix(security): suppress zizmor self-repository false positive for playwright experimental step (#44064)
    
    Co-authored-by: Claude Sonnet 5 <no...@anthropic.com>
---
 .github/workflows/superset-playwright.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/superset-playwright.yml b/.github/workflows/superset-playwright.yml
index cae4b078623..89e95688751 100644
--- a/.github/workflows/superset-playwright.yml
+++ b/.github/workflows/superset-playwright.yml
@@ -166,7 +166,13 @@ jobs:
         with:
           run: playwright-install
       - name: Run Playwright (Experimental Tests)
-        uses: ./.github/actions/cached-dependencies
+        # cached-dependencies is a submodule (not a plain directory), and
+        # the $/ self-repository syntax resolves action files directly from
+        # the repository without performing a real (submodule-aware)
+        # checkout, so it can't see into a submodule's link. Keep this one
+        # on the workspace-relative ./ form, consistent with every other
+        # workflow in the repo that references this action.
+        uses: ./.github/actions/cached-dependencies # zizmor: ignore[self-repository] - $/ cannot resolve an action that lives in a submodule; ./ is required here
         env:
           NODE_OPTIONS: "--max-old-space-size=4096"
         with: