Skip to content

Conversation

@assignUser
Copy link
Member

@assignUser assignUser commented Aug 30, 2025

Composite Actions can have sub-actions that also need to satisfy our allow list but we currently don't have a way to check this. #276 #135

This 'runs' the dummy job but doesn't run any of the actions, this means the runner will download all actions and in that process any new/changed sub-actions would trigger the allow list.

@assignUser assignUser force-pushed the test-for-subactions branch 2 times, most recently from 46f9fad to 33dc075 Compare August 30, 2025 14:45
@assignUser assignUser force-pushed the test-for-subactions branch 3 times, most recently from 75fb655 to 13a4402 Compare August 30, 2025 15:22
@assignUser assignUser force-pushed the test-for-subactions branch from 13a4402 to dde7abf Compare August 30, 2025 15:23
@assignUser assignUser force-pushed the test-for-subactions branch from dde7abf to b41e4f3 Compare August 30, 2025 15:25
@assignUser assignUser marked this pull request as ready for review August 30, 2025 15:25
@assignUser assignUser merged commit cdd2a82 into apache:main Aug 30, 2025
6 checks passed
@assignUser assignUser deleted the test-for-subactions branch August 30, 2025 15:27
assignUser added a commit that referenced this pull request Aug 30, 2025
In #279 I removed the changes to the workflow as I expected the workflows to update it but the triggers aren't setup that way.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant