+1
何品

PJ Fanning <[email protected]> 于2026年2月2日周一 17:22写道:

> +1 binding
>
> On Mon, 2 Feb 2026 at 09:57, Arnout Engelen <[email protected]> wrote:
> >
> > Hi,
> >
> > See the discussion at
> > https://lists.apache.org/thread/s72pqsx8d0bfc4lgq18v76n3s2d7cps6 for
> > background.
> >
> > As that thread yielded no objections, I am now putting up the
> configuration
> > change to a formal vote: I propose to change the workflow approval
> setting
> > for Pekko GitHub Actions from “always
> > require approval for external contributors” to "only need approval the
> > first time".
> >
> > This means we commit to actively monitor the workflows for abuse and act
> > accordingly, which I think is feasible for us because our workflows
> > generally have restricted permissions, and we intend to keep it that way.
> >
> > This is my +1 (binding)
> >
> > (if this vote succeeds the configuration change will be enacted by Infra
> > under INFRA-27565)
> >
> > --
> > Arnout Engelen
> > ASF Security Response
> > Apache Pekko PMC member, ASF Member
> > NixOS Committer
> > Independent Open Source consultant
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to