So far I haven't seen workflow abuses in the projects where I participate so I feel that the risk is low.
+1 taking some overhead from the committers. Thanks Jesus! Best, Stamatis On Thu, Jul 11, 2024 at 10:25 AM Jesus Camacho Rodriguez <jcama...@apache.org> wrote: > > Hello everyone, > > Currently Apache Infra enforces a policy requiring approval for every > GitHub Action run on PRs from non-committers (details in [1]). To > streamline our process, I’ve submitted a new Infra ticket [2] requesting a > change to "Only requires approval first time", a policy widely used across > other ASF projects, reducing the amount of repetitive tasks for project > committers. That means we take the responsibility of actively monitoring > the workflows for abuse as mentioned in [3]. > > I’d like to gather feedback on this proposed change. If you support > switching to "Only requires approval the first time," please respond to > this thread. Likewise, if you have concerns or believe this change is not > beneficial, share your thoughts as well. > > Thanks, > Jesús > > [1] https://github.com/apache/incubator-xtable/issues/490 > [2] https://issues.apache.org/jira/browse/INFRA-25953 > [3] https://infra.apache.org/github-actions-policy.html
