Hi folks,

The ASF infra will kick off the new process of getting approval for
the use of GitHub Actions, on Friday, March 21st.

As soon as the new process will be in place, I will request the
approval to use Github Actions we would need for our CI (I'm thinking
about Helm charts verification for instance).

I will keep you posted,

Regards
JB


---------- Forwarded message ---------
From: Drew Foulks <dfou...@apache.org>
Date: Fri, Mar 7, 2025 at 11:00 PM
Subject: [UPDATE] GitHub Actions self service improvement deployment
To: <annou...@infra.apache.org>


Greetings, all,

We missed our initial deployment date for the new process of getting
approval for the use of GitHub Actions.

There is still a high level of interest among ASF projects to leverage
custom and 3rd party GitHub Actions to support their products' build
requirements,


** The new rollout date is: Friday, March 21st, 2025. **


On implementation, users will be able to issue pull requests against
the infrastructure-actions repository to add 3rd party actions to the
'allow list' for use in GitHub Workflows.

We ask that all projects whose repositories currently use GitHub
Actions enable Dependabot in those repos accordance with our updated
(https://infra.apache.org/github-actions-policy.html)

**PLEASE NOTE**:  Infra will continue to permit use of all
currently-allowed custom actions for several months to give projects
time to make any necessary changes to their workflows.

We will keep everyone apprised of the timeline as it unfolds.
Additionally, we hope to see our builds@ community grow! If you're
interested in our efforts surrounding custom GHA management or
in-house GHA development, meet us on the #asf-ghactions channel in the
the-asf Slack space, or join us on-list at ghacti...@infra.apache.org.


-- 
Cheers,

Drew Foulks
ASF Infra

Reply via email to