jamesfredley opened a new pull request, #535: URL: https://github.com/apache/grails-static-website/pull/535
## Summary Java CI dies at startup on `apache/grails-static-website` because `scacap/action-surefire-report` is not on the ASF GitHub Actions allowlist. Example: https://github.com/apache/grails-static-website/actions/runs/32297211217 Replace that failure-report step with `mikepenz/[email protected]`, which is allowlisted (`mikepenz/action-junit-report@*` in [approved_patterns.yml](https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml)). SHA-pinned to match the rest of the workflows. No other `uses:` in this repo is blocked. `actions/*` is auto-allowed; `gradle/actions/setup-gradle@50e97c2...` already matches an allowlisted SHA. ## Test plan - [ ] Confirm Java CI starts (no "action not allowed" startup failure) - [ ] On a red `check` run, confirm the JUnit report step can publish -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
