Evan Rusackas f165c3fa78 fix(ci): grant security-events write to GHA validator workflow (#40539) ...

Co-authored-by: Claude Code <noreply@anthropic.com>

2026-05-29 21:46:54 -07:00

..

bashlib.sh

ci(e2e): run backend under gunicorn instead of flask dev server (#40234)

2026-05-22 21:09:14 -07:00

bump-python-package.yml

fix: pin 2 unpinned action(s),extract 21 unsafe expression(s) to env vars (#38893)

2026-03-27 14:38:20 +07:00

caches.js

refactor: remove unused flatten function (#20582)

2022-07-01 19:17:55 +08:00

cancel_duplicates.yml

feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions (#38782)

2026-03-21 21:27:30 +07:00

check_db_migration_confict.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

check-python-deps.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

claude.yml

chore(gha): pass commenter login through env in claude.yml (#40042)

2026-05-11 20:00:27 -07:00

codeql-analysis.yml

chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#40458)

2026-05-27 15:28:06 -07:00

dependency-review.yml

chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 (#40016)

2026-05-13 09:33:14 -07:00

docker.yml

chore(ci): update GHA actions to Node.js 24-compatible versions (#40477)

2026-05-29 11:12:41 +07:00

ecs-task-definition.json

chore: turn off talisman for ephemeral environments in ci (#24627)

2023-07-19 14:22:32 -07:00

embedded-sdk-release.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

embedded-sdk-test.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

ephemeral-env-pr-close.yml

chore(deps): bump aws-actions/amazon-ecr-login from 2.1.4 to 2.1.5 (#39931)

2026-05-07 21:54:59 +07:00

ephemeral-env.yml

chore(deps): bump aws-actions/amazon-ecr-login from 2.1.4 to 2.1.5 (#39931)

2026-05-07 21:54:59 +07:00

generate-FOSSA-report.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

github-action-validator.sh

chore: add a github "action-validator" in CI (#28358)

2024-05-09 08:26:27 -07:00

github-action-validator.yml

fix(ci): grant security-events write to GHA validator workflow (#40539)

2026-05-29 21:46:54 -07:00

issue_creation.yml

feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions (#38782)

2026-03-21 21:27:30 +07:00

labeler.yml

chore(deps): bump actions/labeler from 5 to 6 (#35386)

2025-10-01 07:02:52 -07:00

latest-release-tag.yml

fix(gha): use sound condition gating for latest-tag step (#40035)

2026-05-12 22:27:26 +07:00

license-check.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

no-hold-label.yml

fix(ci): stop cancelling Hold Label Check runs (#40380)

2026-05-22 21:10:23 -07:00

pr-lint.yml

feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions (#38782)

2026-03-21 21:27:30 +07:00

pre-commit.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

release.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

showtime-cleanup.yml

feat(ci): use TTL labels for showtime cleanup (#36643)

2025-12-15 15:07:20 -08:00

showtime-trigger.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

superset-app-cli.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

superset-docs-deploy.yml

fix(ci): restrict workflow_run jobs to trusted origins and add zizmor audit (#40533)

2026-05-30 11:11:40 +07:00

superset-docs-verify.yml

fix(ci): restrict workflow_run jobs to trusted origins and add zizmor audit (#40533)

2026-05-30 11:11:40 +07:00

superset-e2e.yml

chore(ci): limit /app/prefix matrix variant to master merges (#40385)

2026-05-22 21:11:21 -07:00

superset-extensions-cli.yml

chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)

2026-05-19 21:51:40 -07:00

superset-frontend.yml

chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)

2026-05-19 21:51:40 -07:00

superset-helm-lint.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

superset-helm-release.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

superset-playwright.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

superset-python-integrationtest.yml

chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)

2026-05-19 21:51:40 -07:00

superset-python-presto-hive.yml

chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)

2026-05-19 21:51:40 -07:00

superset-python-unittest.yml

chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)

2026-05-19 21:51:40 -07:00

superset-translations-comment.yml

ci(translations): hard-block translation regressions in CI (#39443)

2026-05-23 16:30:14 -07:00

superset-translations.yml

chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#40417)

2026-05-25 19:07:14 -07:00

superset-websocket.yml

chore(ci): add explicit permissions to additional workflows (#40067)

2026-05-14 23:24:46 +07:00

supersetbot.yml

chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)

2026-04-15 14:52:48 -07:00

tag-release.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

tech-debt.yml

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)

2026-04-20 08:34:02 -07:00

welcome-new-users.yml

fix(ci): correct first-interaction inputs in welcome workflow (#40508)

2026-05-29 10:53:38 +07:00