A composite GitHub Action that verifies all `uses: refs` in a project's workflow files are on the ASF Infrastructure approved allowlist: https://github.com/apache/infrastructure-actions/blob/main/allowlist-check/README.md Examples here: https://github.com/apache/airflow/blob/main/.github/workflows/asf-allowlist-check.yml https://github.com/apache/magpie/blob/main/.github/workflows/asf-allowlist-check.yml refs https://github.com/apache/lucenenet/pull/1289 refs https://github.com/apache/sedona/pull/2892 See the allowed list: https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
Activity