[CI] Add ASF Allow list workflow

Open

#14,091 opened on Sep 9, 2026 0 comments 0 reactions 1 assignee View on GitHub

@jbampton is already working on this.

Since Sep 10, 2026.

Assessment

This issue has not been assessed yet.

Description

component:ci-cd component:github-actions

A composite GitHub Action that verifies all uses: refs in a project's workflow files are on the ASF Infrastructure approved allowlist:

https://github.com/apache/infrastructure-actions/blob/main/allowlist-check/README.md

Examples here:

https://github.com/apache/airflow/blob/main/.github/workflows/asf-allowlist-check.yml

https://github.com/apache/magpie/blob/main/.github/workflows/asf-allowlist-check.yml

refs https://github.com/apache/lucenenet/pull/1289

refs https://github.com/apache/sedona/pull/2892

See the allowed list:

https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml

Dominant language: Java
Stars: 3.1k
Forks: 1.4k
Avg merge: 6d 20h
Merged PRs (30d): 27

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

More from apache/cloudstack

Resize volume API validation errors are not displayed in the UI Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 90/100

apache/cloudstack#14222 · Opened Sep 22, 2026
create-kubernetes-binaries-iso.sh builds the ISO without setting a volume ID on EL8 based os's Open

bug component:kubernetes

Difficulty 1/5 Under an hour Newbie friendliness 88/100

apache/cloudstack#14180 · Opened Sep 16, 2026
Resource fetching missing projectid: "-1" parameter Open

bug component:projects component:UI

Difficulty 1/5 Under an hour Newbie friendliness 88/100

apache/cloudstack#14070 · 5 comments · Opened Sep 7, 2026
Nas backup restore fails if the backup repository mount options have a trailing space Open

component:backup

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/cloudstack#14013 · Opened Aug 31, 2026
KVM agent fails to connect to Ceph RBD storage pool after upgrading Ceph client to Tentacle 20.2.4 Open

bug component:ceph

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/cloudstack#13989 · 3 comments · Opened Aug 27, 2026

All issues in apache/cloudstack

Similar issues

Compatibility certification request for FJ-EAP 2.1.0 for Jakarta EE Platform 11 Open

certification

Difficulty 1/5 Under an hour Newbie friendliness 80/100

jakartaee/platform#1359 · Opened Sep 24, 2026
Python guide test runner copies stale Micronaut Test Resources state Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

micronaut-projects/micronaut-guides#1856 · Opened Sep 23, 2026
[BUG] ECR GetAuthorizationToken returns a proxyEndpoint for the default region, not the request's Open

bug ecr

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

floci-io/floci#4264 · Opened Sep 23, 2026
Drop point numbers from GitHub milestones Open

Needs: Triage Type: Feature request

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

AntennaPod/AntennaPod#8794 · Opened Sep 23, 2026
[aw] Issue Classification Agent timed out Open

agentic-workflows

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

github/copilot-sdk#2760 · Opened Sep 23, 2026

More Java issues

A short digest of beginner-friendly GitHub issues.