adoroszlai opened a new pull request, #141: URL: https://github.com/apache/ratis-thirdparty/pull/141
## What changes were proposed in this pull request? Addendum for RATIS-2588. Just noticed after merging #139 that the new workflow [only checked](https://github.com/adoroszlai/ratis-thirdparty/actions/runs/28672679767/job/85039301824#step:3:30) `zizmor.yml`: ``` Checking 2 unique action ref(s) against the ASF allowlist: ✅ actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 — trusted owner (actions) (.github/workflows/zizmor.yml) ✅ zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa — matches allowlist (.github/workflows/zizmor.yml) All 2 unique action refs are on the ASF allowlist ``` It turned out that `allowlist-check` only looks at `.yml` files by default, ignoring `.yaml` files. https://github.com/apache/infrastructure-actions/blob/5d6d53e66c7f6f831d4fd0c8fd1a610054ed8a26/allowlist-check/action.yml#L29-L31 This PR configures the action to check both extensions. Also, rename `zizmor.yml` to `.yaml` to match naming convention. https://issues.apache.org/jira/browse/RATIS-2588 ## How was this patch tested? [Before](https://github.com/adoroszlai/ratis-thirdparty/actions/runs/28672645793/job/85039195635#step:3:30) rename: ``` Checking 8 unique action ref(s) against the ASF allowlist: ✅ actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 — trusted owner (actions) (.github/workflows/asf-allowlist-check.yaml, .github/workflows/reusable-check.yaml, .github/workflows/zizmor.yml) ✅ actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c — trusted owner (actions) (.github/workflows/reusable-check.yaml) ✅ actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 — trusted owner (actions) (.github/workflows/reusable-check.yaml) ✅ actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a — trusted owner (actions) (.github/workflows/reusable-check.yaml, .github/workflows/reusable-check.yaml) ✅ apache/infrastructure-actions/allowlist-check@775350a154e610e84c460cb1bbe2d2ab26c15cb3 — trusted owner (apache) (.github/workflows/asf-allowlist-check.yaml) ✅ apache/infrastructure-actions/stash/restore@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache) (.github/workflows/reusable-check.yaml) ✅ apache/infrastructure-actions/stash/save@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache) (.github/workflows/reusable-check.yaml) ✅ zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa — matches allowlist (.github/workflows/zizmor.yml) All 8 unique action refs are on the ASF allowlist ``` [After](https://github.com/adoroszlai/ratis-thirdparty/actions/runs/28672679767/job/85039301824#step:3:30) rename: ``` Checking 8 unique action ref(s) against the ASF allowlist: ✅ actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 — trusted owner (actions) (.github/workflows/asf-allowlist-check.yaml, .github/workflows/reusable-check.yaml, .github/workflows/zizmor.yaml) ✅ actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c — trusted owner (actions) (.github/workflows/reusable-check.yaml) ✅ actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 — trusted owner (actions) (.github/workflows/reusable-check.yaml) ✅ actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a — trusted owner (actions) (.github/workflows/reusable-check.yaml, .github/workflows/reusable-check.yaml) ✅ apache/infrastructure-actions/allowlist-check@775350a154e610e84c460cb1bbe2d2ab26c15cb3 — trusted owner (apache) (.github/workflows/asf-allowlist-check.yaml) ✅ apache/infrastructure-actions/stash/restore@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache) (.github/workflows/reusable-check.yaml) ✅ apache/infrastructure-actions/stash/save@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache) (.github/workflows/reusable-check.yaml) ✅ zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa — matches allowlist (.github/workflows/zizmor.yaml) All 8 unique action refs are on the ASF allowlist ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
