alamb commented on issue #354:
URL: 
https://github.com/apache/arrow-datafusion/issues/354#issuecomment-852343837


   Thanks @jorgecarleitao  - note  I think all that is required from infra is 
not to rely on a third-party action. It is fine if the code lives in the 
arrow-rs repository
   
   > Notice: December 27, 2020: We only allow Actions that are official "Made 
by GitHub" or local to the Apache org on GitHub, to address a potential 
security vulnerability. This is an incident-related policy change. We are 
researching the situation, and the policy may evolve based on what we learn.
   
   https://infra.apache.org/github-actions-secrets.html
   
   Given the license in https://github.com/bdougie/take-action is MIT, I think 
we could simply copy the action code into the arrow-rs repo and be good 👍 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to