[GitHub] [thrift] ctubbsii commented on pull request #2561: THRIFT-5553: java library to use newer gradle API

[GitBox <gi...@apache.org>]

ctubbsii commented on PR #2561:
URL: https://github.com/apache/thrift/pull/2561#issuecomment-1101070469

   > i'm not sure i can debug the CI failures - seems an issue with travis itself as the failures do not have logs and they occur randomly (same situation with other pull requests)
   
   I don't think those failures are related to this change, but I can't be sure. The individual tasks aren't well named and I'm not sure what they're doing.
   
   Also, somebody familiar with the Travis CI configuration might want to investigate moving over to GitHub Actions, since 1) it's built-in to GitHub and possibly a bit more reliable/less dependencies on another party, and 2) I don't trust Travis CI's new permissions model that seems to require granting it oauth permissions for private repos in order to log in to Travis-CI.com to manage builds, even if you only want to use it with public repos. I wonder if that was partially the reason for [this recent security incident involving Travis CI app being targeted and used as a mechanism to steal private repo contents](https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/)
   
   I know one of the main limits of GitHub Actions is the inability to use ARM or other non-x86 architectures when building. As a Java developer I don't generally care about that, but I'm guessing the Thrift project probably cares.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@thrift.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org