1915656 - Assess use of external addon ruby/setup-ruby in Mozilla's GitHub organization application-services

Status: RESOLVED FIXED

(mozilla.org :: Github: Administration, task)

Description

[Bastian Gruber]

I want to use the ruby/setup-ruby@v1 GitHub action in mozilla/application-services for the following reasons:

Below are my answers to your stock questions:

** Which repositories do you want to have access? (all or list)
https://github.com/mozilla/application-services

** Are any of those repositories private?
No

** Provide link to vendor's description of permissions needed and why

** Provide the Install link for a GitHub app
https://github.com/ruby/setup-ruby

Comment 1

[Chris Knowles [:cknowles]]

per https://github.com/MoCo-GHE-Admin/Approved-GHE-add-ons/blob/main/GitHub_Actions.md this action is approved for addition to an org whenever anyone asks.

I've added ruby/setup-ruby@* to the list of allowed actions on the Mozilla org.

Let us know if there's any concerns.