[jira] [Updated] (CALCITE-7799) Add GitHub workflow to check actions are in allow list

["Francis Chuang (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CALCITE-7799?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Francis Chuang updated CALCITE-7799:
------------------------------------
    Summary: Add GitHub workflow to check actions are in allow list  (was: Add GitHub workflow to test actions versions and test build docker images)

> Add GitHub workflow to check actions are in allow list
> ------------------------------------------------------
>
>                 Key: CALCITE-7799
>                 URL: https://issues.apache.org/jira/browse/CALCITE-7799
>             Project: Calcite
>          Issue Type: Task
>          Components: avatica
>            Reporter: Francis Chuang
>            Assignee: Francis Chuang
>            Priority: Major
>             Fix For: avatica-1.30
>
>
> Actions for building docker images can only be pinned by the list of hashes here: [https://github.com/apache/infrastructure-actions/blob/main/actions.yml]
> These hashes are deprecated often and actions will need to be upgraded, otherwise the workflow to build docker images will fail after each release. 
> Add a workflow to validate that we're using allowed actions daily per these instructions: https://github.com/apache/infrastructure-actions#checking-the-action-usage-in-an-asf-project



--
This message was sent by Atlassian Jira
(v8.20.10#820010)