wu-sheng opened a new pull request, #405:
URL: https://github.com/apache/skywalking-python/pull/405

   ### Problem
   
   CI is failing on every run with an ASF GitHub Actions allow-list error:
   
   > The action `dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36` 
is not allowed in apache/skywalking-python because all actions must be from a 
repository owned by your enterprise, created by GitHub, or match one of the 
patterns…
   
   #386 switched the change-detection step from `getsentry/paths-filter` to 
`dorny/paths-filter@de90cc…` (**v3.0.2**), but that SHA is **not** on the [ASF 
approved patterns 
list](https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml).
   
   ### Fix
   
   Repin to `dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d` 
(**v4.0.1**) — the **only** approved `dorny/paths-filter` SHA in 
`apache/infrastructure-actions`, and the same pin already used by 
[`apache/skywalking`](https://github.com/apache/skywalking/blob/master/.github/workflows/skywalking.yaml).
   
   The action's API (`filters` / `id: filter` / `list-files` / `outputs.agent`) 
is unchanged between v3 and v4; v4.0.1 only bumps the Node runtime, so this is 
a drop-in repin with no behavioral change.
   
   ### Verification
   
   - Confirmed `fbd0ab8f…` is the sole approved `dorny/paths-filter` pin 
against the authoritative `approved_patterns.yml`.
   - Swept all `uses:` across the repo's workflows — every other action is 
already allowed (`actions/*` and `apache/*` are auto-approved; 
`tcort/github-action-markdown-link-check@e7c7a18…` is an exact approved match). 
The paths-filter line was the sole violation.
   
   🤖 Generated with [Claude Code](https://claude.com/claude-code)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to