This is an automated email from the ASF dual-hosted git repository.
kou pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-erlang.git
The following commit(s) were added to refs/heads/main by this push:
new 7487e8c chore: Perform ASF allowlist checks on CI changes (#69)
7487e8c is described below
commit 7487e8c566ccfc54c9cedb39753bae51782ead26
Author: Benjamin Philip <[email protected]>
AuthorDate: Wed Jul 1 06:04:17 2026 +0530
chore: Perform ASF allowlist checks on CI changes (#69)
## What issue does this PR close?
Closes #70.
Dependabot updates do not respect the ASF allowlist. Thus, some
dependabot PRs
can silently break workflows as seen in #63.
## What's changed
A workflow to perform to ASF allowlist checks on changes to `.github`
has been
added. Any breakages introduced by dependabot updates (or any other
changes)
will be highlighted.
Copied verbatim from
https://github.com/apache/arrow-adbc/blob/main/.github/workflows/asf-allowlist-check.yml.
---
.github/workflows/asf-allowlist-check.yml | 47 +++++++++++++++++++++++++++++++
1 file changed, 47 insertions(+)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
new file mode 100644
index 0000000..83f8210
--- /dev/null
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -0,0 +1,47 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+# See
https://github.com/apache/iceberg/blob/main/.github/workflows/asf-allowlist-check.yml
+name: "GitHub Actions Checks"
+
+on:
+ pull_request:
+ paths:
+ - ".github/**"
+ push:
+ paths:
+ - ".github/**"
+
+concurrency:
+ group: ${{ github.repository }}-${{ github.head_ref || github.ref }}-${{
github.workflow }}
+ cancel-in-progress: true
+
+permissions:
+ contents: read
+
+jobs:
+ gha:
+ name: "Analyze Actions"
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #
v6.0.3
+ with:
+ persist-credentials: false
+
+ # Check that actions are pinned and on the ASF allowlist.
+ # Intentionally unpinned to always use the latest allowlist from the ASF.
+ - uses: apache/infrastructure-actions/allowlist-check@main # zizmor:
ignore[unpinned-uses]
