[CI] Add ASF Allow list workflow
Open
component:ci-cd
component:github-actions
- Dominant language
- Java
- Stars
- 3.1k
- Forks
- 1.4k
- Avg merge
- 6d 19h
- Merged PRs (30d)
- 32
Description
A composite GitHub Action that verifies all `uses: refs` in a project's workflow files are on the ASF Infrastructure approved allowlist:
https://github.com/apache/infrastructure-actions/blob/main/allowlist-check/README.md
Examples here:
https://github.com/apache/airflow/blob/main/.github/workflows/asf-allowlist-check.yml
https://github.com/apache/magpie/blob/main/.github/workflows/asf-allowlist-check.yml
refs https://github.com/apache/lucenenet/pull/1289
refs https://github.com/apache/sedona/pull/2892
See the allowed list:
https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
Contributor guide
Assessment
This issue has not been assessed yet.