Sign in
apache
/
infrastructure-actions
/
HEAD
2b6ec5f
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 26 hours ago
main
b0ef4e2
Merge pull request #758 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/commit-check/commit-check-action-2.6.0
by Jarek Potiuk
· 26 hours ago
bdffe5b
pytest: enable colored output in CI (#757)
by Jarek Potiuk
· 29 hours ago
91e93b3
action-allowlist-review: bump commit-check/commit-check-action
by dependabot[bot]
· 34 hours ago
c51b02d
verify-action-build: fix RESULT panel cause on binary-download failure (#747)
by Jarek Potiuk
· 2 days ago
0d16f2e
Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml
by asfgit
· 2 days ago
547aef8
Add pip-audit action with version and expiration (#756)
by tison
· 2 days ago
4ec78e9
verify-action-build: support Deno-based actions (deno task bundle) (#749)
by Jarek Potiuk
· 2 days ago
e8b6918
Merge pull request #750 from apache/verify-action-build-consolidate-recursion
by Jarek Potiuk
· 2 days ago
2474a5a
Merge pull request #754 from apache/dependabot/github_actions/dot-github/workflows/zizmorcore/zizmor-action-0.5.3
by Jarek Potiuk
· 2 days ago
d630252
build(deps): bump zizmorcore/zizmor-action in /.github/workflows
by dependabot[bot]
· 2 days ago
5c54054
verify-action-build: unified walker over the composite action graph
by Jarek Potiuk
· 3 days ago
40b6028
Merge pull request #745 from apache/verify-manual-action-workflow
by Jarek Potiuk
· 3 days ago
65329b4
docs: document verify_manual_action.yml and require doc updates for features
by Jarek Potiuk
· 3 days ago
4883581
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 3 days ago
df36e11
Merge pull request #720 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/JustinBeckwith/linkinator-action-2.4.2
by Jarek Potiuk
· 3 days ago
f14688b
ci: verify manually opened allowlist PRs via verify-action-build
by Jarek Potiuk
· 3 days ago
9e95104
Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml
by asfgit
· 3 days ago
6b2ecfe
Merge pull request #739 from chaokunyang/allow-dart-setup-dart-action
by Jarek Potiuk
· 3 days ago
87ca552
Merge pull request #743 from apache/verify-action-binary-download-check
by Jarek Potiuk
· 3 days ago
f2cc7a7
verify-action-build: scan JS/TS sources for unverified downloads
by Jarek Potiuk
· 3 days ago
1aa04bd
verify-action-build: add binary download verification check
by Jarek Potiuk
· 3 days ago
0abd7db
Merge pull request #741 from apache/verify-action-build-dart-support
by Jarek Potiuk
· 3 days ago
12bce66
Merge pull request #742 from apache/dependabot/uv/rich-15.0.0
by Jarek Potiuk
· 3 days ago
c53c05c
action-allowlist-review: bump JustinBeckwith/linkinator-action
by dependabot[bot]
· 3 days ago
b4ef209
build(deps-dev): bump rich from 14.3.3 to 15.0.0
by dependabot[bot]
· 3 days ago
79b9f22
Merge pull request #740 from apache/stash-uv-lock-with-cooldowns
by Jarek Potiuk
· 3 days ago
9f87136
verify-action-build: support Dart-based actions (setup-dart)
by Jarek Potiuk
· 3 days ago
6981364
Add stash uv.lock and enable exclude-newer cooldown across all pyprojects
by Jarek Potiuk
· 3 days ago
1d30905
Allow dart-lang/setup-dart v1.7.1
by 慕白
· 3 days ago
e0f0ac7
Merge pull request #734 from apache/verify-action-cjs-mjs-support
by Dave Fisher
· 4 days ago
66ff315
verify-action-build: support .cjs and .mjs compiled bundle extensions
by Jarek Potiuk
· 5 days ago
4a6aae0
Merge pull request #733 from apache/verify-action-multistage-from
by Jarek Potiuk
· 4 days ago
e5f7872
Merge pull request #737 from apache/fix-dependabot-cooldown-in-readme
by Jarek Potiuk
· 4 days ago
c0f1e0d
Update README with current 0 day cooldown
by Dave Fisher
· 4 days ago
aff2200
Merge pull request #714 from apache/docs/workflow-automation-diagrams
by Dave Fisher
· 4 days ago
6954913
Merge pull request #735 from apache/remove-matlab-run-tests-v3.1.0
by Dave Fisher
· 4 days ago
75f87e4
README: add a full-pipeline summary diagram
by Jarek Potiuk
· 4 days ago
c07be58
README: split auto-expiration into its own section
by Jarek Potiuk
· 4 days ago
7ee0884
Document allowlist automation workflows in README
by Jarek Potiuk
· 8 days ago
82e524b
Remove matlab-actions/run-tests v3.1.0 from approved actions
by Jarek Potiuk
· 5 days ago
8c99ebc
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 5 days ago
e51f02a
Merge pull request #722 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/azure/setup-kubectl-5.1.0
by Jarek Potiuk
· 5 days ago
4241b82
Merge pull request #729 from apache/dependabot/uv/pelican/types-beautifulsoup4-gte-4.12.0.20250516
by Jarek Potiuk
· 5 days ago
67a2d12
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 5 days ago
b01202e
Merge pull request #730 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/astral-sh/setup-uv-8.1.0
by Jarek Potiuk
· 5 days ago
37a5181
Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml
by asfgit
· 5 days ago
920669c
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 5 days ago
cdc3250
Merge pull request #731 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/burnett01/rsync-deployments-8.0.5
by Jarek Potiuk
· 5 days ago
07dfe1d
verify-action-build: skip pin warning for multi-stage FROM references
by Jarek Potiuk
· 5 days ago
49df447
Merge pull request #674 from apache/retry-build-approved-lockfiles
by Jarek Potiuk
· 5 days ago
7ebe16a
Merge pull request #716 from apache/stash-restore-retry-download
by Jarek Potiuk
· 5 days ago
5517022
ci: restore credentials on test-site checkout for pelican publish
by Jarek Potiuk
· 5 days ago
b05768e
stash: add pyproject.toml and scope pelican lint workflow
by Jarek Potiuk
· 8 days ago
cc0f6b6
stash/restore: rewrite download helper and its tests in Python
by Jarek Potiuk
· 8 days ago
05dc3b7
stash/restore: extract download script and add bash unit tests
by Jarek Potiuk
· 8 days ago
7f85218
stash/restore: add retry-count and fail-on-download inputs
by Jarek Potiuk
· 8 days ago
840aad2
action-allowlist-review: bump burnett01/rsync-deployments
by dependabot[bot]
· 5 days ago
27a7a95
Merge pull request #725 from kevinjqliu/kevinjqliu/improve-security-posture
by Jarek Potiuk
· 5 days ago
54f1e20
zizmor: ignore[secrets-outside-env]
by Kevin Liu
· 5 days ago
c03d13e
more zizmor fixes
by Kevin Liu
· 5 days ago
af1c575
action-allowlist-review: bump astral-sh/setup-uv
by dependabot[bot]
· 5 days ago
1d77a69
Remove Expired Refs
by asfgit
· 6 days ago
205f2fd
Update types-beautifulsoup4 requirement in /pelican
by dependabot[bot]
· 6 days ago
39bca9b
zizmor auto-fix
by Kevin Liu
· 6 days ago
edb0a91
remove cooldown
by Kevin Liu
· 6 days ago
0588b6d
remove cooldown
by Kevin Liu
· 6 days ago
82efd49
improvements
by Kevin Liu
· 6 days ago
8a059be
Merge pull request #717 from apache/fix-pelican-lint-install
by Dave Fisher
· 6 days ago
cb86454
action-allowlist-review: bump azure/setup-kubectl
by dependabot[bot]
· 7 days ago
18e77ef
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 8 days ago
c32dbf6
action-allowlist-review: bump lhotari/sandboxed-trivy-action (#718)
by dependabot[bot]
· 8 days ago
6586806
Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml
by asfgit
· 8 days ago
662969f
action-allowlist-review: bump zizmorcore/zizmor-action (#719)
by dependabot[bot]
· 8 days ago
62baf56
Stop running transitive-failures check on pull_request (#721)
by Jarek Potiuk
· 8 days ago
db0dc48
Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml
by asfgit
· 8 days ago
e70372a
Merge pull request #712 from raboof/use-cooldown-except-for-reviews
by Jarek Potiuk
· 8 days ago
e488982
dependabot: apply cooldown except for action reviews
by Arnout Engelen
· 8 days ago
0be6156
pelican: force colorized mypy / pylint output in lint job
by Jarek Potiuk
· 8 days ago
7c1762f
pelican: drop unrecognized suggestion-mode from pylintrc
by Jarek Potiuk
· 8 days ago
4a254f4
pelican: alphabetize imports in plugin_paths.py to retrigger lint
by Jarek Potiuk
· 8 days ago
e0ad006
pelican: pin minimum versions on types-* dev dependencies
by Jarek Potiuk
· 8 days ago
b86a85b
pelican: rename lint job to lint-pelican
by Jarek Potiuk
· 8 days ago
085fd63
pelican: set pelican/ as default working-directory for lint job
by Jarek Potiuk
· 8 days ago
b14f98b
pelican: drop mypy --cache-dir override in lint workflow
by Jarek Potiuk
· 8 days ago
8bda72d
pelican: enable uv cache in lint workflow
by Jarek Potiuk
· 8 days ago
16f5ca0
pelican: collapse lint install step into `uv run`
by Jarek Potiuk
· 8 days ago
7998f82
pelican: drive lint workflow via `uv sync` and dev group
by Jarek Potiuk
· 8 days ago
e51e171
pelican: install lint deps from pyproject.toml
by Jarek Potiuk
· 8 days ago
ff46f5e
Update approved_patterns.yml and .github/workflows/dummy.yml based on actions.yml
by asfgit
· 8 days ago
f123dda
Merge pull request #713 from ppkarwasz/feat/dependabot-fetch-metadata
by Jarek Potiuk
· 8 days ago
afd710d
Merge remote-tracking branch 'apache/main' into feat/dependabot-fetch-metadata
by Piotr P. Karwasz
· 8 days ago
efa596f
Update approved_patterns.yml and .github/workflows/dummy.yml based on actions.yml
by asfgit
· 8 days ago
b4a41f0
Update actions.yml and approved_patterns.yml based on .github/workflows/dummy.yml
by asfgit
· 8 days ago
f293ca3
Merge pull request #704 from apache/dependabot/github_actions/commit-check/commit-check-action-2.5.0
by Jarek Potiuk
· 8 days ago
a146bac
Merge pull request #705 from apache/dependabot/github_actions/leafo/gh-actions-luarocks-6.0.0
by Jarek Potiuk
· 8 days ago
f86d224
Update actions.yml and approved_patterns.yml based on .github/workflows/dummy.yml
by asfgit
· 8 days ago
23f839e
Merge pull request #706 from apache/dependabot/github_actions/docker/build-push-action-7.1.0
by Jarek Potiuk
· 8 days ago
268f2d6
Merge pull request #707 from apache/dependabot/uv/pytest-9.0.3
by Jarek Potiuk
· 8 days ago
eb979df
Merge pull request #710 from apache/dependabot/github_actions/pelican/actions/setup-python-6.2.0
by Jarek Potiuk
· 8 days ago
Next »