> > > > I presume you are referring to the fact that external non-committers > cannot force a build on a forked repo PR on the ASF Jenkins without > whitelisting [1]. This is by design because it is a huge security problem > to run unvetted 3rd party code on our build infrastructure. This is the > same problem that exists with GitHub Self-Hosted Runners, and to a lesser > extent with 3rd party Github Actions, which has collectively brought us to > the discussion we have today. > > Is anyone aware of open-source self-hosted tooling which provides a > Travis-like experience? I understand GitLab may offer something like Github > Actions, but I’m not sure to what extent that functionality exists in the > Community Edition. >
Just a comment on that. I did try Git Lab. 1.5 years ago (!) when we started to have similar experiences with Travis our initial idea was to use GitLab for that. There was one blocker - GitLab did not support running CI jobs from forked PRs. Look here https://gitlab.com/gitlab-org/gitlab/-/issues/5667 (there are few other related issues). I am a close friend of Kamil Trzciński who is the Distinguished Engineer at GitLab and literally the creator of CI integration at GitLab. I spoke to him and he pushed it internally. The ticket got the "CEO interest" label. All looked well. Since then the issues have been moved from a milestone to milestone and it is NOT DONE yet. I was following, pushing and having monthly chats with Kamil about that. After a year I stopped following it. In the meantime GitHub managed to release GitHub Actions and improve it big time - enough that it started to be a viable alternative and we dropped GitLab idea completely. I think, personally. I've done more than I could to solve the problem. I used any opportunity I had. We have money from the Astronomer, AWS and Google who are all big stakeholders in Airflow, but without support and pressure from the ASF, there is not much we (not even members of the ASF) can do. That's why I am crying for help. > > > -Chris > > > [1] > https://cwiki.apache.org/confluence/display/INFRA/git+-+.asf.yaml+features#git.asf.yamlfeatures-JenkinsPRWhitelisting > > > -- +48 660 796 129
