yesamer opened a new pull request, #2224: URL: https://github.com/apache/incubator-kie-examples/pull/2224
## Fix GitHub Actions policy violations in CI workflows ### Problem Two workflows were blocked by the Apache GitHub Enterprise action allow-list policy. **`pr-kogito-examples.yml`** — All PR builds were failing immediately with: `Error: The action scacap/[email protected] is not allowed` The `Surefire Report` step called the composite action `apache/incubator-kie-kogito-pipelines/.ci/actions/surefire-report@main`, which internally delegates to `ScaCap/[email protected]`. That third-party action is not on the enterprise allow-list. **`issues.yml`** — Used `actions/checkout@v7`, which does not exist (latest is `v4`), and was unnecessary since the only subsequent step reads from `github.event` context, not from any repository files. ### Fix **`pr-kogito-examples.yml`**: Replace the composite `surefire-report` action with an inline `bash` step that replicates its exact behavior. The original action was configured with `skip_publishing: true` (no UI annotations) and `fail_on_test_failures: true` — its sole job was to scan `TEST-*.xml` files and fail the step if any `<failure>` or `<error>` test case elements were found. The replacement does the same: ```bash find . -name 'TEST-*.xml' -path '*-reports*' | xargs grep -lq '<failure\|<error[> ]' -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
