Attila Doroszlai created HDDS-16816:
---------------------------------------
Summary: Pin first-party actions to a major version tag
Key: HDDS-16816
URL: https://issues.apache.org/jira/browse/HDDS-16816
Project: Apache Ozone
Issue Type: Sub-task
Components: CI
Reporter: Attila Doroszlai
Assignee: Attila Doroszlai
The [GitHub Actions Policy|https://infra.apache.org/github-actions-policy.html]
requires a specific git hash only for *external* actions; actions in the
{{apache/*}}, {{github/*}} and {{actions/*}} namespaces may be used without
that restriction. Pinning those to a major version tag rather than to a hash
lets a patch or minor release arrive without a pull request, which removes a
large share of the Dependabot traffic a project sees. External actions still
MUST be pinned to a specific git hash.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
