You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ru...@apache.org on 2026/10/12 11:11:34 UTC

(superset) 01/01: chore(ci): correct download-artifact version comment to v8.0.1

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch chore/ci-download-artifact-version-comment
in repository https://gitbox.apache.org/repos/asf/superset.git

commit ffb339be1f8ea658989f686a07dc9ef5ae14487a
Author: Evan Rusackas <ev...@rusackas.com>
AuthorDate: Mon Oct 12 12:11:14 2026 +0100

    chore(ci): correct download-artifact version comment to v8.0.1
    
    Resolves code-scanning alert #3950
    
    Co-Authored-By: Evan Rusackas <ev...@preset.io>
    Co-Authored-By: Claude Sonnet 5.5 <no...@anthropic.com>
---
 .github/workflows/superset-frontend.yml               | 12 ++++++------
 .github/workflows/superset-python-unittest-report.yml |  4 ++--
 .github/workflows/superset-translations-comment.yml   |  2 +-
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/superset-frontend.yml b/.github/workflows/superset-frontend.yml
index 6518621206a..9bf978847f2 100644
--- a/.github/workflows/superset-frontend.yml
+++ b/.github/workflows/superset-frontend.yml
@@ -84,7 +84,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Download Docker Image Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: docker-image
 
@@ -124,7 +124,7 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
 
       - name: Download Coverage Artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: coverage-artifacts-*
           path: coverage/
@@ -145,7 +145,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Download Docker Image Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: docker-image
 
@@ -170,7 +170,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Download Docker Image Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: docker-image
 
@@ -190,7 +190,7 @@ jobs:
     timeout-minutes: 25
     steps:
       - name: Download Docker Image Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: docker-image
 
@@ -236,7 +236,7 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
 
       - name: Download Docker Image Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: docker-image
 
diff --git a/.github/workflows/superset-python-unittest-report.yml b/.github/workflows/superset-python-unittest-report.yml
index 5af82db8215..db897b64a0f 100644
--- a/.github/workflows/superset-python-unittest-report.yml
+++ b/.github/workflows/superset-python-unittest-report.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Download JUnit results
         id: download
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           # merge-multiple is intentionally omitted: each matrix leg's
           # artifact (junit-results-current, junit-results-next) uses the
@@ -51,7 +51,7 @@ jobs:
         id: download-event
         if: steps.download.outcome == 'success'
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: "Event File"
           path: event
diff --git a/.github/workflows/superset-translations-comment.yml b/.github/workflows/superset-translations-comment.yml
index 7e51d0988bc..d43bb003fbe 100644
--- a/.github/workflows/superset-translations-comment.yml
+++ b/.github/workflows/superset-translations-comment.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Download regression artifact
         id: download
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: translation-regression
           run-id: ${{ github.event.workflow_run.id }}