After discussion with the Apache Infra team, we have reverted the GitHub Action policy for all Apache RocketMQ repositories from "requires approval for all outside collaborators" to "requires approval for first-time contributors”.
We thank all developers from the community for your support! We will continue to monitor the use of GitHub Action to prevent abuse. Related jira ticket: https://issues.apache.org/jira/browse/INFRA-24466 On Thu, Apr 13, 2023 at 10:52 AM Lin Shen <shen...@apache.org> wrote: > +1 > > On 2023/04/12 06:50:07 aaron ai wrote: > > Recently, Apache Infra changed the trigger policy for GitHub actions from > > "requires approval for first-time contributors" to "requires approval for > > all outside collaborators". The motivation behind this change was to > > prevent the abuse of GitHub actions. However, I believe that this is a > > significant step backwards. RocketMQ has external contributors whose pull > > requests are now blocked until a maintainer manually approves the > > corresponding workflow, which creates a burden for both contributors and > > maintainers. > > > > I have created a Jira ticket > > <https://issues.apache.org/jira/browse/INFRA-24413> to track this issue > and > > request a return to the previous behavior of "requires approval for > > first-time contributors". We are willing to take responsibility for > > monitoring these workflows to prevent abuse. If you agree with my > viewpoint > > and would like to see a return to the previous policy, please use "+1" to > > express your support. If you disagree, please provide your reasons. We > want > > to hear from as many developers in the community as possible! > > > > Related link: > > * https://infra.apache.org/github-actions-policy.html > > * > > > https://github.blog/2021-04-22-github-actions-update-helping-maintainers-combat-bad-actors/ > > > > Thanks for your time, > > Aaron > > >
