A composite GitHub Action that verifies all `uses: refs` in a project's workflow files are on the ASF Infrastructure approved allowlist: https://github.com/apache/infrastructure-actions/blob/main/allowlist-check/README.md Examples here: https://github.com/apache/airflow/blob/main/.github/workflows/asf-allowlist-check.yml https://github.com/apache/magpie/blob/main/.github/workflows/asf-allowlist-check.yml refs https://github.com/apache/lucenenet/pull/1289 refs https://github.com/apache/sedona/pull/2892 See the allowed list: https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
A composite GitHub Action that verifies all
uses: refsin a project's workflow files are on the ASF Infrastructure approved allowlist:https://github.com/apache/infrastructure-actions/blob/main/allowlist-check/README.md
Examples here:
https://github.com/apache/airflow/blob/main/.github/workflows/asf-allowlist-check.yml
https://github.com/apache/magpie/blob/main/.github/workflows/asf-allowlist-check.yml
refs apache/lucenenet#1289
refs apache/sedona#2892
See the allowed list:
https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml