Skip to content

Commit 917a36c

Browse files
chirag-madlanigithub-advanced-security[bot]Copilot
authored
Potential fix for code scanning alert no. 1842: Artifact poisoning (#27220)
* Potential fix for code scanning alert no. 1842: Artifact poisoning Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * Pin Yarn version to 1.22.18 to fix artifact poisoning alert Agent-Logs-Url: https://github.com/open-metadata/OpenMetadata/sessions/29aebdb5-eef0-4a2a-be01-489deef48d2b Co-authored-by: chirag-madlani <12962843+chirag-madlani@users.noreply.github.com> * Fix artifact poisoning in update-playwright-e2e-docs.yml: replace npm install -g yarn with pinned corepack Agent-Logs-Url: https://github.com/open-metadata/OpenMetadata/sessions/550fba5a-bb13-45da-a144-b67599c9eaa4 Co-authored-by: chirag-madlani <12962843+chirag-madlani@users.noreply.github.com> * Remove corepack prepare to eliminate artifact poisoning: use only corepack enable (bundled yarn) Agent-Logs-Url: https://github.com/open-metadata/OpenMetadata/sessions/90f6ed8d-3f2b-4c3d-9a34-cd1f57c4d89c Co-authored-by: chirag-madlani <12962843+chirag-madlani@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
1 parent 4ae5ec0 commit 917a36c

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

.github/actions/setup-openmetadata-test-environment/action.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ runs:
5353

5454
- name: Install yarn
5555
if: ${{ inputs.install-server == 'true' }}
56-
run: npm install -g yarn
56+
run: corepack enable
5757
shell: bash
5858
# ------------------------------------------------------------------------------
5959

.github/workflows/update-playwright-e2e-docs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
cache-dependency-path: openmetadata-ui/src/main/resources/ui/yarn.lock
4141

4242
- name: Install Yarn
43-
run: npm install -g yarn
43+
run: corepack enable
4444

4545
- name: Install Dependencies
4646
working-directory: openmetadata-ui/src/main/resources/ui

0 commit comments

Comments
 (0)