Skip to content

ci: pin astral-sh/setup-uv to SHA for ASF allowlist compliance#454

Closed
leekeiabstraction wants to merge 1 commit into
mainfrom
fix/pin-setup-uv-sha
Closed

ci: pin astral-sh/setup-uv to SHA for ASF allowlist compliance#454
leekeiabstraction wants to merge 1 commit into
mainfrom
fix/pin-setup-uv-sha

Conversation

@leekeiabstraction

Copy link
Copy Markdown
Contributor

Summary

  • Pin astral-sh/setup-uv from @v4 to commit SHA e06108dd0aef18192324c70427afc47652e63a82 (v7.5.0) to comply with the ASF GitHub Actions allowlist policy
  • This fixes CI workflow start failures where the action was blocked by the org-level allowlist

Closes #453

Test plan

  • Verify Python CI workflow starts successfully after the SHA is added to the ASF allowlist via an INFRA Jira ticket

Pin astral-sh/setup-uv from @v4 to specific commit SHA
(e06108dd0aef18192324c70427afc47652e63a82, v7.5.0) to comply with
the ASF GitHub Actions allowlist policy.

Closes #453
@leekeiabstraction leekeiabstraction deleted the fix/pin-setup-uv-sha branch March 28, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CI: Pin astral-sh/setup-uv to SHA for ASF GitHub Actions allowlist compliance

1 participant