You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pekko.apache.org by Arnout Engelen <en...@apache.org> on 2026/02/02 08:57:15 UTC
[VOTE] allow PR validation without workflow approval for returning contributors
Hi,
See the discussion at
https://lists.apache.org/thread/s72pqsx8d0bfc4lgq18v76n3s2d7cps6 for
background.
As that thread yielded no objections, I am now putting up the configuration
change to a formal vote: I propose to change the workflow approval setting
for Pekko GitHub Actions from “always
require approval for external contributors” to "only need approval the
first time".
This means we commit to actively monitor the workflows for abuse and act
accordingly, which I think is feasible for us because our workflows
generally have restricted permissions, and we intend to keep it that way.
This is my +1 (binding)
(if this vote succeeds the configuration change will be enacted by Infra
under INFRA-27565)
--
Arnout Engelen
ASF Security Response
Apache Pekko PMC member, ASF Member
NixOS Committer
Independent Open Source consultant
[VOTE][RESULT] allow PR validation without workflow approval for returning contributors
Posted by Arnout Engelen <en...@apache.org>.
Hello all,
The vote passes with the following results:
+1 binding: 3 (Arnout Engelen, PJ Fanning, He Pin)
Thanks to all the voters.
I'll go ahead and signal this in INFRA-27565
Arnout
On Mon, Feb 2, 2026 at 9:57 AM Arnout Engelen <en...@apache.org> wrote:
> Hi,
>
> See the discussion at
> https://lists.apache.org/thread/s72pqsx8d0bfc4lgq18v76n3s2d7cps6 for
> background.
>
> As that thread yielded no objections, I am now putting up the
> configuration change to a formal vote: I propose to change the workflow
> approval setting for Pekko GitHub Actions from “always
> require approval for external contributors” to "only need approval the
> first time".
>
> This means we commit to actively monitor the workflows for abuse and act
> accordingly, which I think is feasible for us because our workflows
> generally have restricted permissions, and we intend to keep it that way.
>
> This is my +1 (binding)
>
> (if this vote succeeds the configuration change will be enacted by Infra
> under INFRA-27565)
>
> --
> Arnout Engelen
> ASF Security Response
> Apache Pekko PMC member, ASF Member
> NixOS Committer
> Independent Open Source consultant
>
--
Arnout Engelen
ASF Security Response
Apache Pekko PMC member, ASF Member
NixOS Committer
Independent Open Source consultant
Re: [VOTE] allow PR validation without workflow approval for returning contributors
Posted by kerr <he...@gmail.com>.
+1
何品
PJ Fanning <fa...@apache.org> 于2026年2月2日周一 17:22写道：
> +1 binding
>
> On Mon, 2 Feb 2026 at 09:57, Arnout Engelen <en...@apache.org> wrote:
> >
> > Hi,
> >
> > See the discussion at
> > https://lists.apache.org/thread/s72pqsx8d0bfc4lgq18v76n3s2d7cps6 for
> > background.
> >
> > As that thread yielded no objections, I am now putting up the
> configuration
> > change to a formal vote: I propose to change the workflow approval
> setting
> > for Pekko GitHub Actions from “always
> > require approval for external contributors” to "only need approval the
> > first time".
> >
> > This means we commit to actively monitor the workflows for abuse and act
> > accordingly, which I think is feasible for us because our workflows
> > generally have restricted permissions, and we intend to keep it that way.
> >
> > This is my +1 (binding)
> >
> > (if this vote succeeds the configuration change will be enacted by Infra
> > under INFRA-27565)
> >
> > --
> > Arnout Engelen
> > ASF Security Response
> > Apache Pekko PMC member, ASF Member
> > NixOS Committer
> > Independent Open Source consultant
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@pekko.apache.org
> For additional commands, e-mail: dev-help@pekko.apache.org
>
>
Re: [VOTE] allow PR validation without workflow approval for returning contributors
Posted by PJ Fanning <fa...@apache.org>.
+1 binding
On Mon, 2 Feb 2026 at 09:57, Arnout Engelen <en...@apache.org> wrote:
>
> Hi,
>
> See the discussion at
> https://lists.apache.org/thread/s72pqsx8d0bfc4lgq18v76n3s2d7cps6 for
> background.
>
> As that thread yielded no objections, I am now putting up the configuration
> change to a formal vote: I propose to change the workflow approval setting
> for Pekko GitHub Actions from “always
> require approval for external contributors” to "only need approval the
> first time".
>
> This means we commit to actively monitor the workflows for abuse and act
> accordingly, which I think is feasible for us because our workflows
> generally have restricted permissions, and we intend to keep it that way.
>
> This is my +1 (binding)
>
> (if this vote succeeds the configuration change will be enacted by Infra
> under INFRA-27565)
>
> --
> Arnout Engelen
> ASF Security Response
> Apache Pekko PMC member, ASF Member
> NixOS Committer
> Independent Open Source consultant
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pekko.apache.org
For additional commands, e-mail: dev-help@pekko.apache.org