FilesExpand file tree

main

/

asf-allowlist-check.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

43 lines (39 loc) · 1.48 KB

main

/

asf-allowlist-check.yml

Copy path

Top

File metadata and controls

• Code
• Blame

43 lines (39 loc) · 1.48 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

#

# Licensed to the Apache Software Foundation (ASF) under one

# or more contributor license agreements. See the NOTICE file

# distributed with this work for additional information

# regarding copyright ownership. The ASF licenses this file

# to you under the Apache License, Version 2.0 (the

# "License"); you may not use this file except in compliance

# with the License. You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing,

# software distributed under the License is distributed on an

# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

# KIND, either express or implied. See the License for the

# specific language governing permissions and limitations

# under the License.

#

# Verifies all GitHub Actions refs are on the ASF allowlist.

# Actions not on the allowlist silently fail with "Startup failure" — no logs,

# no notifications, and PRs may appear green because no checks ran.

# See https://github.com/apache/infrastructure-actions/issues/574

name: "ASF Allowlist Check"

on:

pull_request:

merge_group:

push:

branches:

- main

permissions:

contents: read

jobs:

asf-allowlist-check:

runs-on: ubuntu-24.04

steps:

- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

persist-credentials: false

- uses: apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0 # allowlist-check/v1.0.0