From a80f9c4374fc453c06e29cab3d7ab5d2d2c8e37a Mon Sep 17 00:00:00 2001 From: Thomas Boop <52323235+thboop@users.noreply.github.com> Date: Tue, 27 Jul 2021 09:07:21 -0400 Subject: [PATCH] Update 1144-composite-actions.md --- docs/adrs/1144-composite-actions.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/docs/adrs/1144-composite-actions.md b/docs/adrs/1144-composite-actions.md index d1d7eed73fc..2e1c30461ab 100644 --- a/docs/adrs/1144-composite-actions.md +++ b/docs/adrs/1144-composite-actions.md @@ -66,8 +66,7 @@ We want to support the `uses` steps from workflows in composite actions, includi ### Resolve Action Endpoint changes - The resolve actions endpoint will now validate policy to ensure that the given workflow run has access to download that action. - - It will return a value indicated security was checked. Older server versions would lack this boolean. For composite actions that try to resolve an action, if the server does not respond with this value, we will fail the job as we could violate access policy if we allowed the composite action to continue. - - Older GHES/GHAE customers with newer runners will be locked out of composite uses steps until they upgrade their instance. + - Older GHES/GHAE customers with newer runners will be locked out of composite uses steps until they upgrade their instance. ### Local actions - Local actions will expand the tree, perform policy checks, and download actions Just in Time when the step is running.