Skip to content

Commit c496a20

Browse files
potiukpotiuk
authored
Add ASF allowlist check workflow for GitHub Actions (#64450)
Adds a CI workflow that validates all `uses:` references in workflow files against the ASF Infrastructure approved allowlist. This catches action refs that would cause silent "Startup failure" errors in CI.
1 parent 6d8ccc6 commit c496a20

1 file changed

Lines changed: 34 additions & 0 deletions

File tree

‎.github/workflows/asf-allowlist-check.yml‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
# Licensed to the Apache Software Foundation (ASF) under one
2+
# or more contributor license agreements. See the NOTICE file
3+
# distributed with this work for additional information
4+
# regarding copyright ownership. The ASF licenses this file
5+
# to you under the Apache License, Version 2.0 (the
6+
# "License"); you may not use this file except in compliance
7+
# with the License. You may obtain a copy of the License at
8+
#
9+
# http://www.apache.org/licenses/LICENSE-2.0
10+
#
11+
# Unless required by applicable law or agreed to in writing,
12+
# software distributed under the License is distributed on an
13+
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
14+
# KIND, either express or implied. See the License for the
15+
# specific language governing permissions and limitations
16+
# under the License.
17+
---
18+
name: "ASF Allowlist Check"
19+
"on":
20+
pull_request:
21+
paths: [".github/**"]
22+
push:
23+
branches: [main, v*-test]
24+
paths: [".github/**"]
25+
permissions:
26+
contents: read
27+
jobs:
28+
asf-allowlist-check:
29+
runs-on: ubuntu-latest
30+
steps:
31+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
32+
with:
33+
persist-credentials: false
34+
- uses: apache/infrastructure-actions/allowlist-check@493edcdbd80d9e78a767f256a877b1cc6c9712ba # main

0 commit comments

Comments
 (0)