[
https://issues.apache.org/jira/browse/GEODE-10593?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jinwoo Hwang updated GEODE-10593:
---------------------------------
Description: The action gradle/actions/setup-gradle@v5 is not allowed in
apache/geode because all actions must be from a repository owned by your
enterprise, created by GitHub, or match one of the patterns (was: Affected
versions of this package are vulnerable to Allocation of Resources Without
Limits or Throttling via HTTP server metrics instrumentation in Micrometer. An
attacker can cause denial of service by sending specially crafted HTTP requests
that trigger excessive resource consumption during metrics collection and
processing. Repeated requests can degrade application performance and
potentially render the service unavailable.)
> CI build failure
> ----------------
>
> Key: GEODE-10593
> URL: https://issues.apache.org/jira/browse/GEODE-10593
> Project: Geode
> Issue Type: Improvement
> Reporter: Jinwoo Hwang
> Assignee: Jinwoo Hwang
> Priority: Major
>
> The action gradle/actions/setup-gradle@v5 is not allowed in apache/geode
> because all actions must be from a repository owned by your enterprise,
> created by GitHub, or match one of the patterns
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
