The GitHub Actions job "CodeQL" on grails-intellij-plugin.git/validate-actions has succeeded. Run started by GitHub user jdaugherty (triggered by jdaugherty).
Head commit for run: 8571b2de684ab612e3509a78027f58ac4b54f40b / James Daugherty <[email protected]> Validate GitHub Actions against the ASF approved list Port grails-core's validateActions task, which checks every `uses:` entry in .github/workflows against apache/infrastructure-actions: actions/*, github/* and apache/* are auto-approved, anything else must be allowed at any version or pinned to a full SHA on the approved list. A trailing version comment that disagrees with ASF's recorded tag is a warning. The task lives in build-logic as a precompiled script plugin plus task class, applied at the root and run by a new validate-actions workflow on workflow changes and weekly, to catch a pinned SHA being delisted. Differences from grails-core: - the allowlist URLs are task properties (defaulting to ASF) so the task can be tested offline - docker:// references are skipped before the @ split, so a digest-pinned image is no longer reported as an unapproved action - TestKit tests cover the policy; the root check now depends on build-logic's check so they (and validatePlugins) run in CI Report URL: https://github.com/apache/grails-intellij-plugin/actions/runs/37362822363 With regards, GitHub Actions via GitBox
