[
https://issues.apache.org/jira/browse/CALCITE-7799?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Francis Chuang updated CALCITE-7799:
------------------------------------
Summary: Add GitHub workflow to check actions are in allowlist (was: Add
GitHub workflow to check actions are in allow list)
> Add GitHub workflow to check actions are in allowlist
> -----------------------------------------------------
>
> Key: CALCITE-7799
> URL: https://issues.apache.org/jira/browse/CALCITE-7799
> Project: Calcite
> Issue Type: Task
> Components: avatica
> Reporter: Francis Chuang
> Assignee: Francis Chuang
> Priority: Major
> Fix For: avatica-1.30
>
>
> Actions for building docker images can only be pinned by the list of hashes
> here: [https://github.com/apache/infrastructure-actions/blob/main/actions.yml]
> These hashes are deprecated often and actions will need to be upgraded,
> otherwise the workflow to build docker images will fail after each release.
> Add a workflow to validate that we're using allowed actions daily per these
> instructions:
> https://github.com/apache/infrastructure-actions#checking-the-action-usage-in-an-asf-project
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
