(superset) branch fix/security-playwright-self-repository-change-detector created (now a10df9ad482)

[ru...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a change to branch fix/security-playwright-self-repository-change-detector
in repository https://gitbox.apache.org/repos/asf/superset.git


      at a10df9ad482 fix(security): use self-repository syntax for change-detector in Playwright workflow

This branch includes the following new commits:

     new a10df9ad482 fix(security): use self-repository syntax for change-detector in Playwright workflow

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(superset) 01/01: fix(security): use self-repository syntax for change-detector in Playwright workflow

[ru...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch fix/security-playwright-self-repository-change-detector
in repository https://gitbox.apache.org/repos/asf/superset.git

commit a10df9ad4827e05d19f6018c6cf9de08a5f03520
Author: rusackas <ev...@rusackas.com>
AuthorDate: Wed Sep 9 07:47:57 2026 -0700

    fix(security): use self-repository syntax for change-detector in Playwright workflow
    
    Resolves code-scanning alert #2643 (zizmor/self-repository). The
    workspace-relative ./ form isn't a pinning mechanism and depends on
    runtime filesystem state; change-detector is a plain in-repo action
    (not a submodule), so it can safely switch to the $/ self-repository
    form, matching the same fix already applied to this action elsewhere
    (e.g. superset-python-integrationtest.yml).
    
    Co-Authored-By: Claude Sonnet 5 <no...@anthropic.com>
---
 .github/workflows/superset-playwright.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/superset-playwright.yml b/.github/workflows/superset-playwright.yml
index 37675ca150d..29f4adb1fb3 100644
--- a/.github/workflows/superset-playwright.yml
+++ b/.github/workflows/superset-playwright.yml
@@ -42,7 +42,7 @@ jobs:
           persist-credentials: false
       - name: Check for file changes
         id: check
-        uses: ./.github/actions/change-detector/
+        uses: $/.github/actions/change-detector/
         with:
           token: ${{ secrets.GITHUB_TOKEN }}