+1, afaict we have been following these guidelines already without knowing it
On Thu, Jun 1, 2023 at 8:48 AM Atul Mohan <a...@apache.org> wrote: > > +1 > The requirements called out in the policy doc seem reasonable to me. > > Thanks for driving this effort! > > On Wed, May 31, 2023 at 1:10 AM Abhishek Agarwal <abhis...@apache.org> > wrote: > > > Hello, > > I raised an INFRA ticket ( > > https://issues.apache.org/jira/browse/INFRA-24657) > > for the druid project so the contributors don't need a committer to trigger > > PR build/test. Infra has agreed to relax the restrictions enough that a > > contributor will need the approval only for their first contribution. > > > > However, as a project, we need to follow certain requirements that are > > called out here - https://infra.apache.org/github-actions-policy.html > > > > They all seem fine to me. We are using `pull_request_target` for the > > labeler action but that action doesn't export any confidential variables. > > If others agree as well, I will just link this thread to the INFRA ticket. > > > > As a follow-up item, I can add a README.md in .github folder that warns > > contributors and committers to keep these requirements in mind as they > > change GitHub workflows in future. > > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org For additional commands, e-mail: dev-h...@druid.apache.org
