kosiew opened a new issue, #1634:
URL: https://github.com/apache/datafusion-python/issues/1634

   # Replace disallowed Rust toolchain GitHub Action in Release Build
   
   ## Problem
   
   Release Build CI fails before running build steps because Apache action 
policy blocks `dtolnay/rust-toolchain`:
   
   ```text
   The action dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 
is not allowed in apache/datafusion-python because all actions must be from a 
repository owned by your enterprise, created by GitHub, or match one of the 
allowed patterns.
   ```
   
   Affected workflow: `.github/workflows/build.yml`.
   
   Relevant history:
   
   - https://github.com/apache/datafusion-python/pull/1375  added the current 
`dtolnay/rust-toolchain@stable` usages to the Build workflow.
   - 
https://github.com/apache/datafusion-python/commit/5be412b6a691a57bb2246e6726751fe9e8916035
 pinned those usages to 
`dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8`, which is the 
action ref now rejected by Apache policy.
   
   Apache INFRA findings:
   
   -  https://github.com/apache/infrastructure-actions/pull/999 amended the 
allowlist sha to 
`dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30` from 
`dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8`, which is the 
SHA used by datafusion-python.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to