DDL email action workflow is not working properly

[Yicong-Huang]

What happened?

The new action workflow see here recent runs are all failed.

I think the root cause is dawidd6/action-send-mail@v7 is not allowed in apache.

How to reproduce?

INFRA related only.

Version

1.1.0-incubating (Pre-release/Master)

Commit Hash (Optional)

No response

What browsers are you seeing the problem on?

No response

Relevant log output

[Yicong-Huang]

related to #4250.

@gracecluvohio could you please take a look, thanks!

[chenlica]

@gracecluvohio If it's indeed related to the earlier issue, please think about how we could have avoided this case earlier.

[gracecluvohio]

Thanks, I will look into it. It seems like Apache has an allowlist of permitted actions that I wasn't aware of.

[Yicong-Huang]

Thanks, I will look into it. It seems like Apache has an allowlist of permitted actions that I wasn't aware of.

Thanks. Yes we (I and @aglinxinyuan) were aware of the white list. Maybe we can add a check on CI to warn future changes on actions to make reviewers' life easier.

[gracecluvohio]

Thanks, I will look into it. It seems like Apache has an allowlist of permitted actions that I wasn't aware of.

Thanks. Yes we (I and @aglinxinyuan) were aware of the white list. Maybe we can add a check on CI to warn future changes on actions to make reviewers' life easier.

That would be nice.

[gracecluvohio]

One solution would be to request to add the action to the whitelist. However, since this is a temporary solution (I want to add automatic DDL version control later), I suggest we use curl instead to call some email sending API in the Github action, such as Mailtrap, Resend, or Brevo. They all have free tiers that are big enough for our use case. However, I suggest Mailtrap because it has a testing environment that I can use.

[Yicong-Huang]

I think it's better to use some pre-approved actions. It is not worth the effort to whitelist another action: that is a burden to us as well.

I support the idea of using some free tier APIs.