This is an automated email from the ASF dual-hosted git repository.

CritasWang pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iotdb-client-rust.git

commit 2d4cc2133475621563c137bf41ed891a557ab61e
Author: CritasWang <[email protected]>
AuthorDate: Mon Jul 20 10:55:44 2026 +0800

    Add ASF repo metadata: .asf.yaml, NOTICE; pin third-party CI actions to 
commit SHAs (ASF Infra policy)
---
 .asf.yaml                | 56 ++++++++++++++++++++++++++++++++++++++++++++++++
 .github/workflows/ci.yml |  9 ++++----
 NOTICE                   |  5 +++++
 3 files changed, 66 insertions(+), 4 deletions(-)

diff --git a/.asf.yaml b/.asf.yaml
new file mode 100644
index 0000000..7297745
--- /dev/null
+++ b/.asf.yaml
@@ -0,0 +1,56 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+github:
+  description: "Apache IoTDB Client for Rust"
+  homepage: https://iotdb.apache.org/
+  labels:
+    - timeseries
+    - database
+    - rust
+    - client
+    - iot
+  features:
+    wiki: false
+    issues: true
+    discussions: false
+  enabled_merge_buttons:
+    squash: true
+    merge: false
+    rebase: true
+  rulesets:
+    - name: "Default Branch Protection"
+      type: branch
+      branches:
+        includes:
+          - "~DEFAULT_BRANCH"
+          - "release/*"
+          - "rel/*"
+        excludes: []
+      bypass_teams:
+        - root
+      restrict_deletion: true
+      restrict_force_push: true
+
+# Keep dev@ quiet: route all repo event mail to the low-traffic lists.
+notifications:
+  commits: [email protected]
+  issues: [email protected]
+  pullrequests: [email protected]
+  jobs: [email protected]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ec4b485..0a034e0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,11 +32,12 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: dtolnay/rust-toolchain@stable
+      # ASF policy: third-party actions must be pinned to a full commit SHA.
+      - uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 
# stable
         with:
           components: rustfmt, clippy
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
 
       - name: License header check
         run: ./tools/check-license.sh
@@ -80,9 +81,9 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 
# stable
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
 
       - name: Wait for IoTDB
         run: |
diff --git a/NOTICE b/NOTICE
new file mode 100644
index 0000000..b30516e
--- /dev/null
+++ b/NOTICE
@@ -0,0 +1,5 @@
+Apache IoTDB
+Copyright 2018-2026 The Apache Software Foundation.
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).

Reply via email to