You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@tomee.apache.org by "Richard Zowalla (Jira)" <ji...@apache.org> on 2025/06/24 09:18:00 UTC

[jira] [Assigned] (TOMEE-4496) Convert GH Action Tags into Pinned SHA

     [ https://issues.apache.org/jira/browse/TOMEE-4496?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Richard Zowalla reassigned TOMEE-4496:
--------------------------------------

    Assignee: Richard Zowalla

> Convert GH Action Tags into Pinned SHA
> --------------------------------------
>
>                 Key: TOMEE-4496
>                 URL: https://issues.apache.org/jira/browse/TOMEE-4496
>             Project: TomEE
>          Issue Type: Task
>            Reporter: Richard Zowalla
>            Assignee: Richard Zowalla
>            Priority: Major
>
> Infra is getting ready to actually enforce the policy that external GitHub actions must be specified by git hash ([https://infra.apache.org/github-actions-policy.html]). The allowlist can be found at [https://github.com/apache/infrastructure-actions/blob/main/actions.yml] and as you can see there the tags and whitelist are tentatively scheduled to expire 2025-08-01
> [https://github.com/eclipse-csi/octopin/] can be used for converting



--
This message was sent by Atlassian Jira
(v8.20.10#820010)