You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@arrow.apache.org by "kou (via GitHub)" <gi...@apache.org> on 2025/12/04 08:30:06 UTC

[I] [CI] Stop specifying hash for actions/* GitHub Actions [arrow]

kou opened a new issue, #48326:
URL: https://github.com/apache/arrow/issues/48326

   ### Describe the enhancement requested
   
   I don't know why Dependabot sometimes failed to update hash of GitHub Actions.
   
   For example: https://github.com/apache/arrow/pull/48301
   
   The ASF's GitHub Actions policy https://infra.apache.org/github-actions-policy.html requires pinning external actions but there is no such restriction for `actions/*`:
   
   > External actions
   >
   > You MAY use all actions internal to the `apache/*`, `github/*` and `actions/*` namespaces without restrictions.
   >
   > You MUST pin all external actions to the specific git hash (SHA1) of the action that has been reviewed for use by the project. For instance, you MUST pin `foobar/baz-action@8843d7f92416211de9ebb963ff4ce28125932878`.
   
   How about removing hash from all `actions/*` GitHub Actions?
   
   ### Component(s)
   
   Continuous Integration


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] [CI] Stop specifying hash for actions/* GitHub Actions [arrow]

Posted by "raulcd (via GitHub)" <gi...@apache.org>.
raulcd closed issue #48326: [CI] Stop specifying hash for actions/* GitHub Actions
URL: https://github.com/apache/arrow/issues/48326


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] [CI] Stop specifying hash for actions/* GitHub Actions [arrow]

Posted by "raulcd (via GitHub)" <gi...@apache.org>.
raulcd commented on issue #48326:
URL: https://github.com/apache/arrow/issues/48326#issuecomment-3617141790

   Issue resolved by pull request 48327
   https://github.com/apache/arrow/pull/48327


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org