Skip to content

Bump 1password/load-secrets-action to v5.0.1 (sql) - #5707

Merged
peterzhuamazon merged 1 commit into
opensearch-project:mainfrom
peterzhuamazon:1password-actions-v5
Aug 20, 2026
Merged

Bump 1password/load-secrets-action to v5.0.1 (sql)#5707
peterzhuamazon merged 1 commit into
opensearch-project:mainfrom
peterzhuamazon:1password-actions-v5

Conversation

@peterzhuamazon

Copy link
Copy Markdown
Member

Description

Bump 1password/load-secrets-action to v5.0.1 (pinned to commit 70062d7a876d3eb6334754fa26efd2fbd90c32f2).

Issues Resolved

opensearch-project/opensearch-build#6440 (comment)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@github-actions

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 94284b4.

PathLineSeverityDescription
.github/workflows/maven-publish-modules.yml32highGitHub Action dependency changed: 1password/load-secrets-action commit hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has privileged access to secrets in CI/CD. Maintainers must verify the new hash corresponds to the official 1Password release and has not been tampered with.
.github/workflows/maven-publish.yml29highGitHub Action dependency changed: 1password/load-secrets-action commit hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has privileged access to secrets in CI/CD. Maintainers must verify the new hash corresponds to the official 1Password release and has not been tampered with.
.github/workflows/publish-async-query-core.yml43highGitHub Action dependency changed: 1password/load-secrets-action commit hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has privileged access to secrets in CI/CD. Maintainers must verify the new hash corresponds to the official 1Password release and has not been tampered with.
.github/workflows/publish-grammar-files.yml47highGitHub Action dependency changed: 1password/load-secrets-action commit hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has privileged access to secrets in CI/CD. Maintainers must verify the new hash corresponds to the official 1Password release and has not been tampered with.

The table above displays the top 10 most important findings.

Total: 4 | Critical: 0 | High: 4 | Medium: 0 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@github-actions

Copy link
Copy Markdown
Contributor

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
✅ No TODO sections
🔀 No multiple PR themes
⚡ No major issues detected

@peterzhuamazon
peterzhuamazon merged commit 38f3ad0 into opensearch-project:main Aug 20, 2026
67 of 69 checks passed
@github-project-automation github-project-automation Bot moved this from 👀 In Review to ✅ Done in Engineering Effectiveness Board Aug 20, 2026
@opensearch-ci-bot

Copy link
Copy Markdown
Contributor

The backport to 2.19 failed. Please backport manually. See failed workflow run: https://github.com/opensearch-project/sql/actions/runs/32406732198

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport 2.19 backport 3.8 enhancement New feature or request release skip-changelog skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis. v3.9.0

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

3 participants