steveloughran commented on PR #8412: URL: https://github.com/apache/hadoop/pull/8412#issuecomment-4253622439
I see the goal here, even if the details are not something I fully understand yet. 1. PRs happen in a forked repo 2. actions are executed in the user's VM allowance because of (1) you can grant the actions more permissions, including the ability to cache docker and other artifacts. There's no need to worry about cache contamination attacks because they'd happening in the forked repo, not the central one. How about we get this into the hadoop-thirdparty repo first, so we can play with it ourselves and make sure we are all happy before merging this into hadoop itself? https://github.com/apache/hadoop-thirdparty -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
