Skip to content

[Backport 3.8] Bump 1password/load-secrets-action to v5.0.1 (sql) - #5711

Merged
peterzhuamazon merged 1 commit into
opensearch-project:3.8from
opensearch-ci-bot:backport/backport-5707-to-3.8
Aug 20, 2026
Merged

[Backport 3.8] Bump 1password/load-secrets-action to v5.0.1 (sql)#5711
peterzhuamazon merged 1 commit into
opensearch-project:3.8from
opensearch-ci-bot:backport/backport-5707-to-3.8

Conversation

@opensearch-ci-bot

Copy link
Copy Markdown
Contributor

Backport 38f3ad0 from #5707.

…t#5707)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
(cherry picked from commit 38f3ad0)
Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
@github-actions

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit c93a177.

PathLineSeverityDescription
.github/workflows/maven-publish-modules.yml32highGitHub Action dependency changed: 1password/load-secrets-action hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has direct access to secrets/credentials. The large version jump (v2 to v5.0.1) and new commit hash must be verified against the official 1password/load-secrets-action repository.
.github/workflows/maven-publish.yml29highGitHub Action dependency changed: 1password/load-secrets-action hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has direct access to secrets/credentials. The large version jump (v2 to v5.0.1) and new commit hash must be verified against the official 1password/load-secrets-action repository.
.github/workflows/publish-async-query-core.yml43highGitHub Action dependency changed: 1password/load-secrets-action hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has direct access to secrets/credentials. The large version jump (v2 to v5.0.1) and new commit hash must be verified against the official 1password/load-secrets-action repository.
.github/workflows/publish-grammar-files.yml47highGitHub Action dependency changed: 1password/load-secrets-action hash updated from 581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0 (v2) to 70062d7a876d3eb6334754fa26efd2fbd90c32f2 (v5.0.1). This action has direct access to secrets/credentials. The large version jump (v2 to v5.0.1) and new commit hash must be verified against the official 1password/load-secrets-action repository.

The table above displays the top 10 most important findings.

Total: 4 | Critical: 0 | High: 4 | Medium: 0 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@peterzhuamazon
peterzhuamazon merged commit 93fa159 into opensearch-project:3.8 Aug 20, 2026
9 of 39 checks passed
@opensearch-ci-bot
opensearch-ci-bot deleted the backport/backport-5707-to-3.8 branch August 20, 2026 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants