Omega359 commented on PR #13876:
URL: https://github.com/apache/datafusion/pull/13876#issuecomment-2558282900

   I've reverted the nextest changes for now as the github action to install 
the binary of it is not approved and building nextest from source would take 
longer than the time it saves when running tests.
   
   Also noted that some of the non-apache/github actions used in datafusion's 
ci use versions vs githash of a validated version which is against the [apache 
github action 
policy](https://cwiki.apache.org/confluence/display/BUILDS/GitHub+Actions+Security).
 
   
   For example: `mozilla-actions/sccache-action@v0.0.4`
   
   We likely should file another ticket to see change all third-party actions 
to be githash vs version


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@datafusion.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscr...@datafusion.apache.org
For additional commands, e-mail: github-h...@datafusion.apache.org

Reply via email to