This is an automated email from the ASF dual-hosted git repository.
yuqi1129 pushed a commit to branch branch-1.3
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/branch-1.3 by this push:
new 6444181801 [Cherry-pick to branch-1.3] [#11819] fix(ci): Use approved
setup actions and add ASF actions allowlist check (#11820) (#11824)
6444181801 is described below
commit 6444181801109090ab08d9ef52518a4d53ebc464
Author: mchades <[email protected]>
AuthorDate: Mon Jun 29 23:07:06 2026 +0800
[Cherry-pick to branch-1.3] [#11819] fix(ci): Use approved setup actions
and add ASF actions allowlist check (#11820) (#11824)
**Cherry-pick Information:**
- Original commit: fbecb1a8a561f0a03a981bb5f085ed1792fe5022
- Target branch: `branch-1.3`
- Status: ✅ Clean cherry-pick (no conflicts)
---
.github/workflows/asf-allowlist-check.yml | 43 ++++++++++++++++++++++++++
.github/workflows/chart-release.yaml | 2 +-
.github/workflows/chart-test.yaml | 6 ++--
.github/workflows/trino-multi-version-test.yml | 2 +-
4 files changed, 48 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
new file mode 100644
index 0000000000..515f3069c5
--- /dev/null
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -0,0 +1,43 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+name: "ASF Allowlist Check"
+
+on:
+ workflow_dispatch:
+ pull_request:
+ paths:
+ - ".github/**"
+ push:
+ branches:
+ - main
+ paths:
+ - ".github/**"
+
+permissions:
+ contents: read
+
+jobs:
+ asf-allowlist-check:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ with:
+ persist-credentials: false
+ - uses: apache/infrastructure-actions/allowlist-check@main
diff --git a/.github/workflows/chart-release.yaml
b/.github/workflows/chart-release.yaml
index 3415b4afd7..706199aba0 100644
--- a/.github/workflows/chart-release.yaml
+++ b/.github/workflows/chart-release.yaml
@@ -45,7 +45,7 @@ jobs:
- uses: actions/checkout@v4
- name: Set up Helm
- uses: azure/[email protected]
+ uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
- name: Login to Docker Hub
run: |
diff --git a/.github/workflows/chart-test.yaml
b/.github/workflows/chart-test.yaml
index 0ac3c3c285..bff161ce02 100644
--- a/.github/workflows/chart-test.yaml
+++ b/.github/workflows/chart-test.yaml
@@ -34,7 +34,7 @@ jobs:
fetch-depth: 0
- name: Set up Helm
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4
+ uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
- uses: actions/[email protected]
with:
@@ -42,7 +42,7 @@ jobs:
check-latest: true
- name: Set up chart-testing
- uses:
helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
+ uses:
helm/chart-testing-action@2fe8321ec9b8d234608c02c67623a886b72d7335
- name: List changed
id: list-changed
@@ -123,7 +123,7 @@ jobs:
done
- name: Set up kubectl
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b
+ uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d
- name: Run chart-testing (install default,gravitino)
if: steps.list-changed.outputs.changed == 'true'
diff --git a/.github/workflows/trino-multi-version-test.yml
b/.github/workflows/trino-multi-version-test.yml
index f9c55137f0..129637cbf3 100644
--- a/.github/workflows/trino-multi-version-test.yml
+++ b/.github/workflows/trino-multi-version-test.yml
@@ -15,7 +15,7 @@ jobs:
- uses: ./.github/actions/setup-java-toolchains
- name: Set up QEMU
- uses: docker/setup-qemu-action@v3
+ uses:
docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
- name: Check required command
run: dev/ci/check_commands.sh
