From 50227e6a8760959c1eee452b9cc8c74c217462b4 Mon Sep 17 00:00:00 2001 From: Rudransh Shrivastava Date: Wed, 30 Sep 2026 12:01:02 +0530 Subject: [PATCH] .github/workflows/vmui.yml: remove eslint annotation action Remove the unmaintained third-party `ataylorme/eslint-annotate-action` from the vmui workflow in order to reduce supply-chain risk. The `make vmui-lint` command still fails CI on lint errors. Printing ESLint errors in the workflow logs should be enough for blocking pull requests with lint errors. See the alternatives considered and why this was removed: https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11259#issuecomment-4981601165 Signed-off-by: Rudransh Shrivastava --- .github/workflows/vmui.yml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/.github/workflows/vmui.yml b/.github/workflows/vmui.yml index c114f047c..d4db398bd 100644 --- a/.github/workflows/vmui.yml +++ b/.github/workflows/vmui.yml @@ -24,9 +24,7 @@ jobs: vmui-checks: name: VMUI Checks (lint, test, typecheck) permissions: - checks: write contents: read - pull-requests: read runs-on: ubuntu-latest steps: - name: Code checkout @@ -69,12 +67,6 @@ jobs: run: make vmui-typecheck continue-on-error: true - - name: Annotate Code Linting Results - uses: ataylorme/eslint-annotate-action@d57a1193d4c59cbfbf3f86c271f42612f9dbd9e9 # 3.0.0 - with: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - report-json: app/vmui/packages/vmui/vmui-lint-report.json - - name: Check overall status run: | echo "Lint status: ${{ steps.lint.outcome }}"