[libcloud] 01/04: Add info on how to updated vendored 3rd party GHA actions.

[to...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

tomaz pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/libcloud.git

commit 9f914e38cb061220c3f450f4ad41706c29267223
Author: Tomaz Muraus <to...@tomaz.me>
AuthorDate: Mon Jan 2 14:37:24 2023 +0100

    Add info on how to updated vendored 3rd party GHA actions.
---
 .github/actions/README.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/actions/README.md b/.github/actions/README.md
new file mode 100644
index 000000000..a39398aee
--- /dev/null
+++ b/.github/actions/README.md
@@ -0,0 +1,14 @@
+# Vendored / Bundled Actions
+
+ASF doesn't allow referencing 3rd party Github Actions inside the workflows so
+we vendor 3rd party actions we use directly in this directory.
+
+Those action repositories are stored using github subtrees and you can update them
+using the following commands:
+
+```bash
+# Those commands need to run from the repository root
+git subtree pull --prefix .github/actions/skip-duplicate-actions https://github.com/fkirc/skip-duplicate-actions.git master --squash
+
+git subtree pull --prefix .github/actions/gh-action-pip-audit/ https://github.com/pypa/gh-action-pip-audit.git main --squash
+```