kevinjqliu opened a new pull request, #15797: URL: https://github.com/apache/iceberg/pull/15797
Adds a CI workflow that verifies all `uses:` refs in workflow files are on the [ASF allowlist](https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml) using [`apache/infrastructure-actions/allowlist-check`](https://github.com/apache/infrastructure-actions/tree/main/allowlist-check). ### Why Actions not on the ASF org-level allowlist silently fail with "Startup failure" — no logs, no notifications, and PRs may appear green because no checks actually ran. See https://github.com/apache/infrastructure-actions/issues/574. ### What - New workflow `.github/workflows/asf-allowlist-check.yml` - Triggers on PRs and pushes to `main` that modify `.github/**` - Intentionally pinned to `@main` to always check against the latest allowlist -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
