brew
brew copied to clipboard
Remove third-party actions (where possible)
Verification
- [X] This issue's title and/or description do not reference a single formula e.g.
brew install wget. If they do, open an issue at https://github.com/Homebrew/homebrew-core/issues/new/choose instead.
Provide a detailed description of the proposed feature
We should avoid third-party, unofficial GitHub Actions where possible, particularly those that do simple things like gh can do in a one-liner (e.g. opening a pull request)
What is the motivation for the feature?
Improving the security profile of Homebrew
How will the feature be relevant to at least 90% of Homebrew users?
It won't be.
What alternatives to the feature have been considered?
- Doing nothing
- Creating more of our own actions
- Doing a security audit of our actions
CC @Homebrew/security folks for thoughts here too.