You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@beam.apache.org by "alexeyinkin (via GitHub)" <gi...@apache.org> on 2023/02/10 15:11:18 UTC

[GitHub] [beam] alexeyinkin opened a new issue, #25424: [Bug]: Playground frontend test workflow does not run due to action security policy

alexeyinkin opened a new issue, #25424:
URL: https://github.com/apache/beam/issues/25424

   ### What happened?
   
   A run:
   https://github.com/apache/beam/actions/runs/4145102529
   
   Error:
   > subosito/flutter-action@v2 and nanasess/setup-chromedriver@v1 are not allowed to be used in apache/beam. Actions in this workflow must be: within a repository owned by apache, created by GitHub, verified in the GitHub Marketplace, or matching the following: */*@[a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9]+, AdoptOpenJDK/install-jdk@*, JamesIves/github-pages-deploy-action@5dc1d5a192aeb5ab5b7d5a77b7d36aea4a7f5c92, TobKed/label-when-approved-action@*, actions-cool/issues-helper@*, actions-rs/*, al-cheb/configure-pagefile-action@*, amannn/action-semantic-pull-request@*, apache/*, burrunan/gradle-cache-action@*, bytedeco/javacpp-presets/.github/actions/*, chromaui/action@*, codecov/codecov-action@*, conda-incubator/setup-miniconda@*, container-tools/kind-action@*, container-tools/microshift-action@*, dawidd6/action-download-artifact@*, delaguardo/setup-graalvm@*, docker://jekyll/jekyll:*, docker://pandoc/core:2.9, eps1lon/actions-label-merge-conflict@*, gaurav-nelson/gith
 ub-a...
   
   
   ### Issue Priority
   
   Priority: 3 (minor)
   
   ### Issue Components
   
   - [ ] Component: Python SDK
   - [ ] Component: Java SDK
   - [ ] Component: Go SDK
   - [ ] Component: Typescript SDK
   - [ ] Component: IO connector
   - [ ] Component: Beam examples
   - [X] Component: Beam playground
   - [ ] Component: Beam katas
   - [ ] Component: Website
   - [ ] Component: Spark Runner
   - [ ] Component: Flink Runner
   - [ ] Component: Samza Runner
   - [ ] Component: Twister2 Runner
   - [ ] Component: Hazelcast Jet Runner
   - [ ] Component: Google Cloud Dataflow Runner


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [beam] alexeyinkin commented on issue #25424: [Bug]: Playground frontend test workflow does not run due to action security policy

Posted by "alexeyinkin (via GitHub)" <gi...@apache.org>.
alexeyinkin commented on issue #25424:
URL: https://github.com/apache/beam/issues/25424#issuecomment-1426116161

   This involves two actions:
   1. https://github.com/marketplace/actions/flutter-action -- installs Flutter.
   2. https://github.com/marketplace/actions/setup-chromedriver -- installs Chrome Driver and Chrome.
   
   So we have two options: to inline them or to whitelist them with Apache. The following are pros for whitelisting:
   - **Size:** They are of 238 and 77 lines. We gist of that is shorter if we strip error handling and easy version selection, but I would rather have those perks.
   - **Reusability:** We need them in Playground for now but in a few weeks we will also need them in Tour of Beam, that is two workflows. One day we may further split workflows to run different kinds of tests, and that is too much of duplication.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [beam] alexeyinkin commented on issue #25424: [Bug]: Playground frontend test workflow does not run due to action security policy

Posted by "alexeyinkin (via GitHub)" <gi...@apache.org>.
alexeyinkin commented on issue #25424:
URL: https://github.com/apache/beam/issues/25424#issuecomment-1429484740

   Actions are whitelisted by Apache: https://issues.apache.org/jira/browse/INFRA-24188


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [beam] alexeyinkin commented on issue #25424: [Bug]: Playground frontend test workflow does not run due to action security policy

Posted by "alexeyinkin (via GitHub)" <gi...@apache.org>.
alexeyinkin commented on issue #25424:
URL: https://github.com/apache/beam/issues/25424#issuecomment-1425946350

   .take-issue


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [beam] alexeyinkin closed issue #25424: [Bug]: Playground frontend test workflow does not run due to action security policy

Posted by "alexeyinkin (via GitHub)" <gi...@apache.org>.
alexeyinkin closed issue #25424: [Bug]: Playground frontend test workflow does not run due to action security policy
URL: https://github.com/apache/beam/issues/25424


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org