The GitHub Actions job "Pre-commit Checks" on 
incubator-graphar.git/fix-pypi-publish-action has failed.
Run started by GitHub user yangxk1 (triggered by yangxk1).

Head commit for run:
5087f258333e2d4d20be30c046be75a423a10177 / yangxk1 <[email protected]>
fix(CI): pin pypa/gh-action-pypi-publish to Apache-allowlisted commit

The workflow referenced pypa/gh-action-pypi-publish via @release/v1
and @release/2473ec6c6aa87f38946284d51289219fd0b87264, neither of
which is on the Apache organization's action allowlist, so the
upload_test_pypi and upload_pypi jobs fail with "action not allowed".

Apache infra pins this action to commit ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
(v1.13.0, keep: true) in apache/infrastructure-actions/actions.yml.
Other Apache projects (thrift, mahout) use the same pin. Switch both
jobs to that commit so the action resolves to the allowlisted version.

Report URL: https://github.com/apache/incubator-graphar/actions/runs/28371173772

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to