Issues

• allowlist-check should fail the build for actions in the expiration window

  apache/infrastructure-actions#1317 · Filter by author zabetak opened on Sep 21, 2026
  2

• Pre-emptive check for transitive allowlist expiries

  apache/infrastructure-actions#1316 · Filter by author potiuk opened on Sep 20, 2026

• Track upstream verification/provenance requests blocking allowlist bumps

  apache/infrastructure-actions#1160 · Filter by author potiuk opened on Aug 7, 2026

• how to pin dtolnay/rust-toolchain

  gateway
  apache/infrastructure-actions#1153 · Filter by author raboof opened on Aug 6, 2026
  1

• Investigate tag-based pinning for sibling-calling actions (immutable releases)

  apache/infrastructure-actions#852 · Filter by author potiuk opened on May 18, 2026
  4

• Harden actions/setup-java action

  apache/infrastructure-actions#794 · Filter by author ppkarwasz opened on May 3, 2026

• Identify and list all OIDC trusted publishing actions

  apache/infrastructure-actions#793 · Filter by author dave2wave opened on May 2, 2026
  2

• Discuss: which GitHub-Actions-security measures should be recommended / encouraged / enforced across ASF repos?

  apache/infrastructure-actions#746 · Filter by author potiuk opened on Apr 19, 2026
  13

• Determine some more criteria for actions review

  apache/infrastructure-actions#686 · Filter by author potiuk opened on Apr 9, 2026
  21

• ASF Pelican update plan

  pelican
  Task

  apache/infrastructure-actions#670 · Filter by author dave2wave opened on Apr 5, 2026
  

• Review and where possible remove wildcard/keep actions

  gateway
  apache/infrastructure-actions#666 · Filter by author raboof opened on Apr 5, 2026
  3

• Evaluate generation of aboms for ci/cd dependency analysis

  dependenciesenhancementgatewaygood first issue
  apache/infrastructure-actions#665 · Filter by author dave2wave opened on Apr 4, 2026
  5

• Should "update dummy workflow" run on "pull_request"?

  gateway
  apache/infrastructure-actions#645 · Filter by author raboof opened on Apr 1, 2026
  1

• See if cmarkgfm python packaging can replace our build for pelican action

  pelicanpython
  apache/infrastructure-actions#610 · Filter by author dave2wave opened on Mar 27, 2026
  2

• Better diagnostics for un-allowlisted transitive actions

  enhancementgateway
  apache/infrastructure-actions#606 · Filter by author raboof opened on Mar 26, 2026

• Silent CI failures due to enforced action restrictions with no prior notice

  apache/infrastructure-actions#574 · Filter by author kevinjqliu opened on Mar 23, 2026
  15

• Pelican build action deprecation warnings on cmake of libcmark

  pelican
  apache/infrastructure-actions#400 · Filter by author dave2wave opened on Nov 30, 2025

• gateway: fine-grained trust levels

  gateway
  apache/infrastructure-actions#324 · Filter by author raboof opened on Oct 6, 2025
  4

• Actions Watchlist

  gateway
  apache/infrastructure-actions#238 · Filter by author assignUser opened on Jul 27, 2025

• Automation of Branch Names for a Simple Standard Build Workflow

  pelican
  apache/infrastructure-actions#45 · Filter by author dave2wave opened on Jun 10, 2024
  5