Skip to content

Conversation

@phlogistonjohn
Copy link
Collaborator

Remove the use of unofficial github actions.
Pin the official github actions with the git sha id.

As per: https://lists.ceph.io/hyperkitty/list/dev@ceph.io/thread/5KWHAST62YAT4P25OO6JYMTRSGSZYPOS/

Checklist

  • Infra ONLY

New or infrequent contributors may want to review the go-ceph Developer's Guide including the section on how we track API Status and the API Stability Plan.

The go-ceph project uses mergify. View the mergify command guide for information on how to interact with mergify. Add a comment with @Mergifyio rebase to rebase your PR when github indicates that the PR is out of date with the base branch.

It's a nice idea but is rubbing up against the new Ceph org policy of
only allowing approved actions while I've never had a need/opportunity
to use it.

Signed-off-by: John Mulligan <jmulligan@redhat.com>
Per the recent ceph org policy to harden the actions pin the
actions used in main.yml with the action's sha ids.

Signed-off-by: John Mulligan <jmulligan@redhat.com>
In accordance with recent ceph org policy.

Signed-off-by: John Mulligan <jmulligan@redhat.com>
Pin official github provided actions and remove the use of a third party
action. Replace the 3rd party action with a very hokey manual step.
Fixing this for real will involve some future research.

Signed-off-by: John Mulligan <jmulligan@redhat.com>
@phlogistonjohn phlogistonjohn added the no-API This PR does not include any changes to the public API of a go-ceph package label Mar 24, 2025
@phlogistonjohn phlogistonjohn changed the title Jjm actions workflows: update actions for new ceph org policy changes Mar 24, 2025
@phlogistonjohn
Copy link
Collaborator Author

Copy link
Collaborator

@anoopcs9 anoopcs9 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks.

@phlogistonjohn
Copy link
Collaborator Author

Hi @anoopcs9 did you mean to approve? You appear to have only commented and so mergify hasn't taken any action. Thanks :-)

@mergify mergify bot merged commit 17f2e65 into ceph:master Mar 25, 2025
15 checks passed
@phlogistonjohn phlogistonjohn deleted the jjm-actions branch March 25, 2025 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no-API This PR does not include any changes to the public API of a go-ceph package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants