You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "diogoteles08 (via GitHub)" <gi...@apache.org> on 2023/09/12 14:04:20 UTC
[GitHub] [arrow] diogoteles08 opened a new pull request, #37676: GH-36898: [CI] Hashpin Sensitive GitHub Actions
diogoteles08 opened a new pull request, #37676:
URL: https://github.com/apache/arrow/pull/37676
### Rationale for this change
Explained on issue #36898
### What changes are included in this PR?
For security reasons, it hashpins the calls for github actions that are called with sensitive permission (usually `pull-requests: write`) or with secrets used on the same context. I'm not hashpinning every action call because the tag-pinning flexibility can be useful if used with caution, e.g. in testing environment.
### Are these changes tested?
Not tested, but the changes on this PR shouldn't change any comportment of the CI, as we'd still be using the exact same version, but pinned differently.
### Are there any user-facing changes?
No
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-36898: [CI] Hashpin Sensitive GitHub Actions [arrow]
Posted by "conbench-apache-arrow[bot] (via GitHub)" <gi...@apache.org>.
conbench-apache-arrow[bot] commented on PR #37676:
URL: https://github.com/apache/arrow/pull/37676#issuecomment-1781386702
After merging your PR, Conbench analyzed the 5 benchmarking runs that have been run so far on merge-commit 91b642a0bdbecd3969861f14ed3f914d65a4aa14.
There were no benchmark performance regressions. 🎉
The [full Conbench report](https://github.com/apache/arrow/runs/18089361410) has more details. It also includes information about 3 possible false positives for unstable benchmarks that are known to sometimes produce them.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow] github-actions[bot] commented on pull request #37676: GH-36898: [CI] Hashpin Sensitive GitHub Actions
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #37676:
URL: https://github.com/apache/arrow/pull/37676#issuecomment-1715793833
:warning: GitHub issue #36898 **has been automatically assigned in GitHub** to PR creator.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-36898: [CI] Hashpin Sensitive GitHub Actions [arrow]
Posted by "assignUser (via GitHub)" <gi...@apache.org>.
assignUser merged PR #37676:
URL: https://github.com/apache/arrow/pull/37676
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-36898: [CI] Hashpin Sensitive GitHub Actions [arrow]
Posted by "assignUser (via GitHub)" <gi...@apache.org>.
assignUser commented on PR #37676:
URL: https://github.com/apache/arrow/pull/37676#issuecomment-1772029772
Ah sorry I missed this PR... I will check it out.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow] diogoteles08 commented on pull request #37676: GH-36898: [CI] Hashpin Sensitive GitHub Actions
Posted by "diogoteles08 (via GitHub)" <gi...@apache.org>.
diogoteles08 commented on PR #37676:
URL: https://github.com/apache/arrow/pull/37676#issuecomment-1715803047
Noticed that you have bumped some version at the time I was working on this. I'm working to resolve the conflicts
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org