This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch v3-2-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/v3-2-test by this push:
new ed0018c847e [v3-2-test] Add ASF allowlist check workflow for GitHub
Actions (#64450) (#64452)
ed0018c847e is described below
commit ed0018c847ecf93c80a9df320913b69b49f96aef
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Wed Apr 1 13:42:59 2026 +0200
[v3-2-test] Add ASF allowlist check workflow for GitHub Actions (#64450)
(#64452)
Adds a CI workflow that validates all `uses:` references in workflow
files against the ASF Infrastructure approved allowlist. This catches
action refs that would cause silent "Startup failure" errors in CI.
(cherry picked from commit c496a204c279901436741619caa6909e7d6ac509)
Co-authored-by: Jarek Potiuk <[email protected]>
---
.github/workflows/asf-allowlist-check.yml | 34 +++++++++++++++++++++++++++++++
1 file changed, 34 insertions(+)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
new file mode 100644
index 00000000000..3112509faae
--- /dev/null
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -0,0 +1,34 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+---
+name: "ASF Allowlist Check"
+"on":
+ pull_request:
+ paths: [".github/**"]
+ push:
+ branches: [main, v*-test]
+ paths: [".github/**"]
+permissions:
+ contents: read
+jobs:
+ asf-allowlist-check:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ with:
+ persist-credentials: false
+ - uses:
apache/infrastructure-actions/allowlist-check@493edcdbd80d9e78a767f256a877b1cc6c9712ba
# main
