Grails uses the following 3rd party GitHub actions. PRs have been created to request that the following be added to the allowed list. See more details on: https://docs.google.com/document/d/17SdV1nFtIP67Ru8jMQMMZ852PiNaiaiklFNiruQMMu8/edit?tab=t.0#heading=h.3m9yl093tvp8
Note: You MUST pin all external actions to the specific git hash (SHA1) of the action that has been reviewed for use by the project. Our projects must be updated to use a hash instead of release version or branch name. google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a Purpose: deploy start.grails.org backend https://github.com/apache/infrastructure-actions/pull/145 supercharge/mongodb-github-action@90004df786821b6308fb02299e5835d0dae05d0d Purpose: spin up mongodb for tests https://github.com/apache/infrastructure-actions/pull/146 supercharge/redis-github-action@ea9b21c6ecece47bd99595c532e481390ea0f044 Purpose: spin up redis for tests https://github.com/apache/infrastructure-actions/pull/147 James
