Search results

dependabot leaves a stale version comment on uses: lines carrying a trailing # zizmor: ignore[...]

Status: Open.

#952 In apache/infrastructure-actions;

· potiuk opened on Jun 22, 2026

Should approved_patterns.yml use the correct word casing for actions ?

Status: Open.

#950 In apache/infrastructure-actions;

· jbampton opened on Jun 20, 2026

maintain-one-comment should be removed from allowed list due to being compromised and no longer available

Status: Open.

#891 In apache/infrastructure-actions;

· rluvaton opened on May 27, 2026

Investigate tag-based pinning for sibling-calling actions (immutable releases)

Status: Open.

#852 In apache/infrastructure-actions;

· potiuk opened on May 18, 2026

Harden actions/setup-java action

Status: Open.

#794 In apache/infrastructure-actions;

· ppkarwasz opened on May 3, 2026

Identify and list all OIDC trusted publishing actions

Status: Open.

#793 In apache/infrastructure-actions;

· dave2wave opened on May 2, 2026

Discuss: which GitHub-Actions-security measures should be recommended / encouraged / enforced across ASF repos?

Status: Open.

#746 In apache/infrastructure-actions;

· potiuk opened on Apr 19, 2026

Determine some more criteria for actions review

Status: Open.

#686 In apache/infrastructure-actions;

· potiuk opened on Apr 9, 2026

ASF Pelican update plan

pelicanthe pelican actionthe pelican action

Status: Open.

Task

#670 In apache/infrastructure-actions;

· dave2wave opened on Apr 5, 2026

Review and where possible remove wildcard/keep actions

gatewayThings related to the GitHub Actions allowlist gatewayThings related to the GitHub Actions allowlist gateway

Status: Open.

#666 In apache/infrastructure-actions;

· raboof opened on Apr 5, 2026

Evaluate generation of aboms for ci/cd dependency analysis

dependenciesPull requests that update a dependency filePull requests that update a dependency file

enhancementNew feature or requestNew feature or request

gatewayThings related to the GitHub Actions allowlist gatewayThings related to the GitHub Actions allowlist gateway

good first issue

Status: Open.

#665 In apache/infrastructure-actions;

· dave2wave opened on Apr 4, 2026

Should "update dummy workflow" run on "pull_request"?

gatewayThings related to the GitHub Actions allowlist gatewayThings related to the GitHub Actions allowlist gateway

Status: Open.

#645 In apache/infrastructure-actions;

· raboof opened on Apr 1, 2026