Evan Rusackas 2e7bec3646 chore(ci): harden GitHub Actions workflows per static analysis (#40545) ...

Co-authored-by: Claude Code <noreply@anthropic.com>

2026-05-30 13:13:43 +07:00

..

bashlib.sh

ci(e2e): run backend under gunicorn instead of flask dev server (#40234)

2026-05-22 21:09:14 -07:00

bump-python-package.yml

fix: pin 2 unpinned action(s),extract 21 unsafe expression(s) to env vars (#38893)

2026-03-27 14:38:20 +07:00

caches.js

refactor: remove unused flatten function (#20582)

2022-07-01 19:17:55 +08:00

cancel_duplicates.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

check_db_migration_confict.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

check-python-deps.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

claude.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

codeql-analysis.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

dependency-review.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

docker.yml

chore(ci): update GHA actions to Node.js 24-compatible versions (#40477)

2026-05-29 11:12:41 +07:00

ecs-task-definition.json

chore: turn off talisman for ephemeral environments in ci (#24627)

2023-07-19 14:22:32 -07:00

embedded-sdk-release.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

embedded-sdk-test.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

ephemeral-env-pr-close.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

ephemeral-env.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

generate-FOSSA-report.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

github-action-validator.sh

chore: add a github "action-validator" in CI (#28358)

2024-05-09 08:26:27 -07:00

github-action-validator.yml

fix(ci): grant security-events write to GHA validator workflow (#40539)

2026-05-29 21:46:54 -07:00

issue_creation.yml

feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions (#38782)

2026-03-21 21:27:30 +07:00

labeler.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

latest-release-tag.yml

fix(gha): use sound condition gating for latest-tag step (#40035)

2026-05-12 22:27:26 +07:00

license-check.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

no-hold-label.yml

fix(ci): stop cancelling Hold Label Check runs (#40380)

2026-05-22 21:10:23 -07:00

pr-lint.yml

feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions (#38782)

2026-03-21 21:27:30 +07:00

pre-commit.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

release.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

showtime-cleanup.yml

feat(ci): use TTL labels for showtime cleanup (#36643)

2025-12-15 15:07:20 -08:00

showtime-trigger.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

superset-app-cli.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

superset-docs-deploy.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-docs-verify.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-e2e.yml

chore(ci): limit /app/prefix matrix variant to master merges (#40385)

2026-05-22 21:11:21 -07:00

superset-extensions-cli.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-frontend.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-helm-lint.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

superset-helm-release.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

superset-playwright.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

superset-python-integrationtest.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-python-presto-hive.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-python-unittest.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

superset-translations-comment.yml

ci(translations): hard-block translation regressions in CI (#39443)

2026-05-23 16:30:14 -07:00

superset-translations.yml

chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#40417)

2026-05-25 19:07:14 -07:00

superset-websocket.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

supersetbot.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

tag-release.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

tech-debt.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00

welcome-new-users.yml

chore(ci): harden GitHub Actions workflows per static analysis (#40545)

2026-05-30 13:13:43 +07:00