Skip to content

Add the ASF Allowlist check workflow - #14113

Open
jbampton wants to merge 1 commit into
apache:mainfrom
jbampton:add-asf-allowlist-workflow
Open

Add the ASF Allowlist check workflow#14113
jbampton wants to merge 1 commit into
apache:mainfrom
jbampton:add-asf-allowlist-workflow

Conversation

@jbampton

@jbampton jbampton commented Sep 10, 2026

Copy link
Copy Markdown
Member

Description

https://github.com/apache/infrastructure-actions/releases/tag/allowlist-check%2Fv1.0.0

This PR closes #14091

Example code:

https://github.com/apache/airflow/blob/main/.github/workflows/asf-allowlist-check.yml

Types of changes

  • Breaking change (fix or feature that would cause existing functionality to change)
  • New feature (non-breaking change which adds functionality)
  • Bug fix (non-breaking change which fixes an issue)
  • Enhancement (improves an existing feature and functionality)
  • Cleanup (Code refactoring and cleanup, that may add test cases)
  • Build/CI
  • Test (unit or integration test code)

Feature/Enhancement Scale or Bug Severity

Feature/Enhancement Scale

  • Major
  • Minor

Bug Severity

  • BLOCKER
  • Critical
  • Major
  • Minor
  • Trivial

Screenshots (if appropriate):

How Has This Been Tested?

  • prek run -a
  • pre-commit run --all-files

This check runs on the GitHub CI so let us see what happens

How did you try to break this feature and the system with this change?

Copilot AI lite review requested due to automatic review settings September 10, 2026 01:52
@codecov

codecov Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 19.79%. Comparing base (036493f) to head (872f1e2).

Additional details and impacted files 
@@            Coverage Diff            @@
##               main   #14113   +/-   ##
=========================================
  Coverage     19.79%   19.79%           
- Complexity    20015    20017    +2     
=========================================
  Files          6371     6371           
  Lines        575954   575954           
  Branches      70521    70521           
=========================================
+ Hits         113997   114006    +9     
+ Misses       449530   449514   -16     
- Partials      12427    12434    +7
Flag Coverage Δ
uitests 3.52% <ø> (ø)
unittests 21.07% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot AI reviewed Sep 10, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Pull request overview

Adds a GitHub Actions workflow to run the Apache Infrastructure “allowlist-check” action on relevant .github/** changes, supporting ASF compliance checks for repository workflows.

Changes:

  • Introduces a new ASF Allowlist Check workflow triggered on PRs and main-branch pushes that touch .github/**.
  • Pins actions/checkout and apache/infrastructure-actions/allowlist-check to specific SHAs for supply-chain safety.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/workflows/asf-allowlist-check.yml
asf-allowlist-check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
jbampton
jbampton commented Sep 10, 2026
View reviewed changes

@jbampton jbampton left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

https://github.com/apache/cloudstack/actions/runs/34427195244/job/102714838499

Image

weizhouapache
weizhouapache approved these changes Sep 10, 2026
View reviewed changes

@weizhouapache weizhouapache left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the checks look good

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@weizhouapache weizhouapache weizhouapache approved these changes

Assignees

No one assigned

Labels

component:integration

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[CI] Add ASF Allow list workflow

3 participants

@jbampton @weizhouapache