google-github-actions: not allowed in github org

[bsieber-mozilla]

google-github-actions/setup-gcloud@v0 is not allowed to be used in mozilla/jira-bugzilla-integration. Actions in this workflow must be: within a repository that belongs to your Enterprise account, created by GitHub or match the following: !/mozilla/**, !mozilla/**, ./**, 10up/wpcs-action@*, aws-actions/*, docker/*, pypa/gh-action-pypi-publish@v1.4.2, slackapi/slack-github-action@*, codecov/codecov-action@v2.

EDIT:
Link to bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1759241

[bsieber-mozilla]

hi @aerickson-admin and @cknowles-admin,

I'm curious what is the process for requesting additional actions to be allowed within the @mozilla org?

I was hoping to add google-github-actions to deploy the build and pushed (to GCR) container.

[cknowles-admin]

File a bug here, and we can get it routed to secops and then added. The main concern is that actions are an org-wide change only - unless you embed the action in the repo, which is allowed, but not super flexible.

[bsieber-mozilla]

Thanks @cknowles-admin!

[bsieber-mozilla]

Hi @cknowles-admin (no rush on responding)

If I fork the repo where this action exists into the mozilla org--if I'm reading the error message above correctly--it could make the action potentially usable, would that be acceptable while waiting for secops to process the bug?

[cknowles-admin]

I have trouble believing it's that easy to circumvent the "only listed actions" setting that the org has - Sadly the "is it acceptable" question is the one that secops needs to answer. @hwine do you have thoughts? (Feel free to just do it all in the bug.)

[bsieber-mozilla]

Closing this issue; thanks @cknowles-admin!