You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@fesod.apache.org by "ongdisheng (via GitHub)" <gi...@apache.org> on 2025/11/06 07:52:52 UTC
[I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
ongdisheng opened a new issue, #678:
URL: https://github.com/apache/fesod/issues/678
### Search before asking
- [x] I searched in the [issues](https://github.com/apache/fesod/issues) and found nothing similar.
### Fesod version
1.3.0
### JDK version
N/A
### Operating system
N/A
### Steps To Reproduce
1. Create a PR that changes files in `website/` folder
2. `preview-docs.yml` workflow attempts to start
3. Workflow fails at startup with action restriction error
Failed run: https://github.com/apache/fesod/actions/runs/19072405399
### Current Behavior
The workflow fails at startup because `nwtgck/actions-netlify@v3.0` is blocked by Apache's security policy:
> "The action nwtgck/actions-netlify@v3.0 is not allowed in apache/fesod because all actions must be from a repository owned by your enterprise..."
This prevents preview deployments for documentation PRs.
### Expected Behavior
Preview deployments should work for documentation PRs.
### Anything else?
_No response_
### Are you willing to submit a PR?
- [x] I'm willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei closed issue #678: [Bug] Preview docs workflow blocked by Apache security policy
URL: https://github.com/apache/fesod/issues/678
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3506550931
> Infrastructure policy requires use of a SHA and not a version tag.
>
> If you change the action reference to `nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654` it should work.
>
> Currently approved actions: https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
Hi @dave2wave ,
Do you familiar with such Netlify deploy workflow in Apache way?
Just try to apply a Netlify account for this usage, seems we have to grant by Apache?
<img width="1811" height="1317" alt="Image" src="https://github.com/user-attachments/assets/6bb4fa2f-b3aa-4535-a7df-b949faa85702" />
otherwise, may we know any other ways to deploy the preview website?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3497633810
PTAL @alaahong
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "ongdisheng (via GitHub)" <gi...@apache.org>.
ongdisheng commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3495798110
Hi @delei, thank you so much for looking into this issue! I think the problem might be a bit different from the secrets configuration. The workflow is actually failing at startup before it even gets to check for secrets.
When you look at the [failed run](https://github.com/apache/fesod/actions/runs/19072405399), you'll notice it shows `Startup failure`. This happens because Apache's enterprise security policy doesn't allow external actions like `nwtgck/actions-netlify@v3.0` to run in `fesod` repository.
The git submodule approach is a workaround specifically for this security restriction. Instead of referencing the action directly from an external repository which Apache blocks, we can add it as a git submodule in our own repository under `.github/actions/`. This way, GitHub sees it as a local action that lives in the repo, which Apache's policy does allow. I noticed other Apache projects like `apache/apisix-website` use this same submodule [solution](https://github.com/apache/apisix-website/tree/master/.github/actions).
You're absolutely right that we'll need the Netlify secrets configured once this is approved. I just wanted to mention that currently the workflow can't start due to the action being blocked, but once this fix is in place, we can move forward with the secrets configuration. Hope this helps clarify! Please let me know if you have any questions or if there's anything I should adjust.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3566949457
According to my understanding, in the "pull_request" section, due to security reasons, it seems that secrets cannot be used. Please conduct further investigation and research on this matter.
<img width="854" height="367" alt="Image" src="https://github.com/user-attachments/assets/2337e4ab-7981-40e9-b796-838202bd50cb" />
Currently, I have directly modified the NETLIFY project settings to enable its operation.
Please verify whether the `preview-docs.yml` needs to be modified and ensure that we use secrets safely.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3498281624
Infrastructure policy requires use of a SHA and not a version tag.
If you change the action reference to `nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654` it should work.
Currently approved actions: https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "ongdisheng (via GitHub)" <gi...@apache.org>.
ongdisheng commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3566965858
Hi @delei, you're correct about the security issue with `pull_request` not being able to access secrets from forks. The solution is to change `pull_request` to `pull_request_target` in `preview-docs.yml`. This runs the workflow in the base repository's context so it can access secrets. Since we're only building static documentation and deploying to Netlify, it's safe to use `pull_request_target` here. Would you like me to submit a separate PR for this change, or would you prefer to test it first on an existing PR #707?
Changes that need to be made:
```yml
name: Preview Documentation
on:
- pull_request:
+ pull_request_target:
paths:
- 'website/**'
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "ongdisheng (via GitHub)" <gi...@apache.org>.
ongdisheng commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3567559178
Hi @delei, You're absolutely right about the security concerns with `pull_request_target`. I really appreciate you pointing this out. I've researched alternative approaches and found a secure two-workflow pattern that solves this issue. The solution splits the preview into two separate workflows:
1. The first [workflow](https://github.com/ongdisheng/fesod/blob/main/.github/workflows/pr-docs-build.yml)runs on `pull_request` to build the documentation without accessing any secrets.
2. The second [workflow](https://github.com/ongdisheng/fesod/blob/main/.github/workflows/pr-docs-preview.yml) runs on `workflow_run` trigger to deploy the built artifact to Netlify with secrets access, but only after the build succeeds.
The key security benefit is that `workflow_run` always uses the workflow file from the default branch, not from the PR branch. This means even if a fork PR tries to modify the deploy workflow to steal secrets, their modified version won't execute. Only the trusted workflow on our main branch will run. This way, untrusted code from fork PRs never has access to our Netlify secrets, while we can still provide preview deployments for all PRs. I've already implemented and tested [this](https://github.com/ongdisheng/fesod/pull/1) on my fork repo. Please feel free to check it out and let me know if there is anything that needs to be changed. I'd be happy to make any adjustments based on your feedback.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3497599677
Thank you for your feedback. I suggest that after we have configured the Netlify secrets, you can add a `.gitmodules` to your PR. We will update our progress here in this issue ASAP.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3506675210
Thanks Dave, just raise ticket for this https://issues.apache.org/jira/browse/INFRA-27391
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3568087087
> Hi [@delei](https://github.com/delei), You're absolutely right about the security concerns with `pull_request_target`. I really appreciate you pointing this out. I've researched alternative approaches and found a secure two-workflow pattern that solves this issue. The solution splits the preview into two separate workflows:
>
> 1. The first [workflow](https://github.com/ongdisheng/fesod/blob/main/.github/workflows/pr-docs-build.yml) runs on `pull_request` to build the documentation without accessing any secrets.
> 2. The second [workflow](https://github.com/ongdisheng/fesod/blob/main/.github/workflows/pr-docs-preview.yml) runs on `workflow_run` trigger to deploy the built artifact to Netlify with secrets access, but only after the build succeeds.
>
> The key security benefit is that `workflow_run` always uses the workflow file from the default branch, not from the PR branch according to GitHub [docs](https://github.blog/news-insights/product-news/github-actions-improvements-for-fork-and-pull-request-workflows/). This means even if a fork PR tries to modify the deploy workflow to steal secrets, their modified version won't execute. Only the trusted workflow on our main branch will run. This way, untrusted code from fork PRs never has access to our Netlify secrets, while we can still provide preview deployments for all PRs. I've already implemented and tested [this](https://github.com/ongdisheng/fesod/pull/1) on my fork repo. Please feel free to check it out and let me know if there is anything that needs to be changed. I'd be happy to make any adjustments based on your feedback.
>
> CC: [@alaahong](https://github.com/alaahong)
Can you suggest the correct configuration?
The 709 configuration set as below with errors,
<img width="1072" height="857" alt="Image" src="https://github.com/user-attachments/assets/d5021fc7-348c-4fb8-8c98-f9c0261346ea" />
It's running under netlify as your given all empty settings, but seems that's not from the CI? just dry run on netlify.
<img width="903" height="692" alt="Image" src="https://github.com/user-attachments/assets/d6a2c7e0-9651-4084-9d9b-78bf40271412" />
Whatever trigger the job from Netlify or CI, it should be fine to:
1. Preview the PR diff on temp website
2. Can deploy the website via github actions
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3495686608
We have noted this issue. As we have not yet applied for NETLIFY, please await community approval for this action. Once approved, we shall maintain the Actions secrets within the repository.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "ongdisheng (via GitHub)" <gi...@apache.org>.
ongdisheng commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3498883868
> Infrastructure policy requires use of a SHA and not a version tag.
>
> If you change the action reference to `nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654` it should work.
>
> Currently approved actions: https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
@dave2wave Thank you for pointing this out! I completely missed that the infrastructure policy allows external actions when referenced by SHA instead of version tags. This is much simpler than the submodule approach I was attempting. I'll update the workflow to use the SHA reference.
> Thank you for your feedback. I suggest that after we have configured the Netlify secrets, you can add a `.gitmodules` to your PR. We will update our progress here in this issue ASAP.
@delei Thank you for looking into the Netlify secrets configuration. Just wondering if I should wait for the secrets to be set up before submitting the PR, or would you prefer I submit it now so it's ready once the configuration is complete? Thanks again to both of you for the guidance!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "ongdisheng (via GitHub)" <gi...@apache.org>.
ongdisheng commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3568128539
Hi @alaahong, Thanks for sharing the configuration! Let me clarify the different approaches:
1. The empty Netlify settings approach relies entirely on GitHub Actions CI to build and deploy. However, it's not working for PR 709 because:
- The current `preview-docs.yml` workflow uses `pull_request` trigger
- For fork PRs, GitHub doesn't provide secrets for security reasons
- So the workflow can't access `NETLIFY_AUTH_TOKEN` and `NETLIFY_SITE_ID` to deploy
2. Netlify build settings approach (what you tried):
> Base directory: website
> Build command: pnpm build
> Publish directory: build
This approach lets Netlify handle the build directly similar to the Selenium repo you shared with me previously. However, it requires a `pnpm-lock.yaml` file in the `website/` folder, which we don't have in our repository. That's why the builds are failing.
My proposed solution: The secure two-workflow pattern uses the `workflow_run` trigger, which only works when the workflow file exists on the main branch. So it seems like we need to merge it to main first before it can be tested with PRs. Let me know what you think or if you have other suggestions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3506654132
@alaahong You will need to get help from ASF Infra. See https://infra.apache.org You should file a ticket in the INFRA project at https://issues.apache.org/jira
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3575563201
@ongdisheng Thanks for your keeping following on this.
Just disabled the netlify from account level to avoid additional comment on per PR.
I think it's better to seek a vote on the community on such preview solution (I might take less efforts on the solution than you, but seems it really complex with a long long period on the verification).
You might raise your PR on the enhance solution if the code already there, we could leave that at a publish position to be opening review~
Thanks for your efforts on such proposal again!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3567468889
> Hi [@delei](https://github.com/delei), you're absolutely right about the security issue with `pull_request` not being able to access secrets from forks. The solution is to change `pull_request` to `pull_request_target` in `preview-docs.yml`. This will run the workflow in the base repository's context so it can access secrets. Since we're only building static documentation and deploying to Netlify, it's safe to use `pull_request_target` here. Changes that need to be made:
>
> name: Preview Documentation
>
> on:
> - pull_request:
> + pull_request_target:
> paths:
> - 'website/**'
> I can submit a PR for this change if you'd like. After it's merged, we can continue to test the preview on PR [#707](https://github.com/apache/fesod/pull/707) to verify it works correctly. Apologies for any confusion with the previous PRs.
-1 , The `pull_request_target` poses a security risk and we should avoid using it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "alaahong (via GitHub)" <gi...@apache.org>.
alaahong commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3536179929
> > Thanks Dave, just raise ticket for this https://issues.apache.org/jira/browse/INFRA-27391
>
> Hi [@alaahong](https://github.com/alaahong) [@delei](https://github.com/delei), it seems like ASF Infra team has granted Netlify access to `fesod`. Would anyone from the team be able to check if we can access the Netlify? Thanks a lot!
Thanks for your following, but seems I missed the required permission for this, let me check the correct way later.
<img width="660" height="701" alt="Image" src="https://github.com/user-attachments/assets/7180f5a1-f7b6-4d27-92ee-259cd9734bd6" />
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3566911861
Hi, @alaahong @ongdisheng
I have updated `NETLIFY_AUTH_TOKEN` and `NETLIFY_SITE_ID` in secrets. Please verify whether the effect is correct in PR #707 .
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "delei (via GitHub)" <gi...@apache.org>.
delei commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3498909837
Please feel free to submit your PR. There are no strict requirements for this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org
Re: [I] [Bug] Preview docs workflow blocked by Apache security policy [fesod]
Posted by "ongdisheng (via GitHub)" <gi...@apache.org>.
ongdisheng commented on issue #678:
URL: https://github.com/apache/fesod/issues/678#issuecomment-3526753251
> Thanks Dave, just raise ticket for this https://issues.apache.org/jira/browse/INFRA-27391
Hi @alaahong @delei, it seems like ASF Infra team has granted Netlify access to `fesod`. Would anyone from the team be able to check if we can access the Netlify? Thanks a lot!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@fesod.apache.org
For additional commands, e-mail: commits-help@fesod.apache.org