Skip to content

Build and push images workflow fails: sbt/setup-sbt action SHA not allowlisted #4643

@bobbai00

Description

@bobbai00

What happened?

The Build and push images workflow fails at the generate-jooq job with:

The action sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd is not allowed in apache/texera because all actions must be from a repository owned by your enterprise

ASF Infra's allowlist no longer permits the v1.1.14 SHA pinned in generate-jooq. The other two jobs (build-amd64, build-arm64) already use the allowlisted v1.1.22 SHA, so only the JOOQ job is blocked — but it is a needs: of both build jobs, so the whole workflow fails.

Expected: workflow runs to completion and publishes images for all services.

How to reproduce?

  1. Trigger .github/workflows/build-and-push-images.yml (manual or nightly).
  2. The generate-jooq job fails immediately on the Setup sbt launcher step.

Version

1.1.0-incubating (Pre-release/Master)

Relevant log output

The action sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd is not allowed in apache/texera because all actions must be from a repository owned by your enterprise

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions