apache / apache/incubator-pegasus
Pin all actions on Github to commit SHAs
Open
- Dominant language
- C++
- Stars
- 2.1k
- Forks
- 328
- PR merge metrics
- No merged PRs in 30d
Description
According to the the reply from INFRA team[1] and the doc of infrastructure
actions[2], the actions in allow list must be pinned to a SHA rather than a tag
as of August 1st, 2025.
We have already pinned some actions to commit SHAs in the following two PRs. We now need to pin all remaining actions to commit SHAs as well.
- https://github.com/apache/incubator-pegasus/pull/2275
- https://github.com/apache/incubator-pegasus/pull/2331
1. https://issues.apache.org/jira/browse/INFRA-27084
2. https://github.com/apache/infrastructure-actions/?tab=readme-ov-file#adding-a-new-action-to-the-allow-list
Contributor guide
Assessment
This issue has not been assessed yet.