This is an automated email from the ASF dual-hosted git repository. potiuk pushed a commit to branch fix-v3-3-static-checks in repository https://gitbox.apache.org/repos/asf/airflow.git
commit 7b523acae8f3c0c030e1d1741095220455325c17 Author: Jarek Potiuk <[email protected]> AuthorDate: Sun Sep 13 00:08:53 2026 +0200 Pin the ASF allowlist check to its released tag Zizmor 1.30's ref-version-mismatch audit reads the version comment next to a hash pin and resolves it. The allowlist check carried "# main", which can never match the commit it names, so the audit fails the static check run. main repinned this action to the released allowlist-check/v1.0.0 tag, which resolves to exactly the pinned commit. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_017fW5PWcphnVD7Sua5LKBQg --- .github/workflows/asf-allowlist-check.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml index 00e962f24c7..058c5aca453 100644 --- a/.github/workflows/asf-allowlist-check.yml +++ b/.github/workflows/asf-allowlist-check.yml @@ -31,4 +31,5 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: apache/infrastructure-actions/allowlist-check@ec1b354a0455b41001d77473236d02a0ee0adba4 # main + # yamllint disable-line rule:line-length + - uses: apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0 # allowlist-check/v1.0.0
