[
https://issues.apache.org/jira/browse/HADOOP-19858?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18074972#comment-18074972
]
ASF GitHub Bot commented on HADOOP-19858:
-----------------------------------------
ajfabbri commented on PR #8412:
URL: https://github.com/apache/hadoop/pull/8412#issuecomment-4284241139
Next steps before we can merge this:
1. Confirm with INFRA if they prefer Docker Hub or GHCR, and how they want
to handle secrets:
https://github.com/ajfabbri/hadoop/pull/5#issuecomment-4284194011
2. Cherry-pick my commit (currently
[65d328f4](https://github.com/ajfabbri/hadoop/pull/5/changes/65d328f45389954f28405d9938620848936dbacb))
adding `# Security: ` comments to workflows and reducing default workflow
permissions (or other equivalent fix). Those comments still have a TODO which
will be updated once we resolve (1).
3. Get CodeQL scanning merged with a clean run here before we merge this.
> Set up build workflow in GitHub Actions
> ---------------------------------------
>
> Key: HADOOP-19858
> URL: https://issues.apache.org/jira/browse/HADOOP-19858
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: build
> Reporter: Cheng Pan
> Priority: Major
> Labels: pull-request-available
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
