ajfabbri commented on PR #8412:
URL: https://github.com/apache/hadoop/pull/8412#issuecomment-4284241139

   Next steps before we can merge this:
   
   1. Confirm with INFRA if they prefer Docker Hub or GHCR, and how they want 
to handle secrets: 
https://github.com/ajfabbri/hadoop/pull/5#issuecomment-4284194011
   2. Cherry-pick my commit (currently 
[65d328f4](https://github.com/ajfabbri/hadoop/pull/5/changes/65d328f45389954f28405d9938620848936dbacb))
 adding `# Security:  ` comments to workflows and reducing default workflow 
permissions (or other equivalent fix). Those comments still have a TODO which 
will be updated once we resolve (1).
   3. Get CodeQL scanning merged with a clean run here before we merge this.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to