Skip to content

Commit 0d74d3d

Browse files
committed
CI: Revert GitHub Actions for Docker, by hash
All CI Builds have been failing since 18 hours ago: - apache#18571 (comment) - https://github.com/apache/nuttx/actions/runs/23389990049 > _The action docker/login-action@v4 is not allowed in apache/nuttx because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: 1Password/load-secrets-action@13f58ee, 1Password/load-secrets-action@8d0d610, 1Password/load-secrets-action@dafbe7c, AdoptOpenJDK/install-jdk@*, BobAnkh/auto-generate-changelog@*, DavidAnson/markdownlint-cli2-action@07035fd, DavidAnson/markdownlint-cli2-action@30a0e04, EnricoMi/publish-unit-test-result-action@*, JamesIves/github-pages-deploy-action@4a3abc7, JamesIves/github-pages-deploy-action@d92aa23, Jimver/cuda-toolkit@6008063, Jimver/cuda-toolkit@b6fc3a9, JustinBeckwith/linkinator-action@af984b9f30f63e796..._ That's because ASF Infrastructure Team has mandated that we use the Hash Versions of GitHub Actions for Docker, stated below: - https://github.com/apache/infrastructure-actions/blob/main/actions.yml - Which generates: https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml - Due to: apache/infrastructure-actions#547 ```yaml docker/build-push-action: 10e90e3645eae34f1e60eeb005ba3a3d33f178e8: tag: v6.19.2 docker/login-action: c94ce9fb468520275223c153574b00df6fe4bcc9: tag: v3.7.0 docker/metadata-action: c299e40c65443455700f0fdfc63efafe5b349051: tag: v5.10.0 docker/setup-buildx-action: 8d2750c68a42422c14e847fe6c8ac0403b4cbd6f: tag: v3.12.0 ``` This PR reverts our GitHub Actions for Docker to the hash versions stated above. Signed-off-by: Lup Yuen Lee <luppy@appkaki.com>
1 parent bef5603 commit 0d74d3d

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

.github/workflows/build.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -172,7 +172,7 @@ jobs:
172172
run: tar zxf sources.tar.gz
173173

174174
- name: Docker Login
175-
uses: docker/login-action@v3.7.0
175+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
176176
with:
177177
registry: ghcr.io
178178
username: ${{ github.actor }}
@@ -262,7 +262,7 @@ jobs:
262262
run: tar zxf sources.tar.gz
263263

264264
- name: Docker Login
265-
uses: docker/login-action@v3.7.0
265+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
266266
with:
267267
registry: ghcr.io
268268
username: ${{ github.actor }}

.github/workflows/docker_linux.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -66,10 +66,10 @@ jobs:
6666
swap-storage: true
6767

6868
- name: Set up Docker Buildx
69-
uses: docker/setup-buildx-action@v3.12.0
69+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
7070

7171
- name: Log into registry
72-
uses: docker/login-action@v3.7.0
72+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
7373
with:
7474
registry: ghcr.io
7575
username: ${{ github.actor }}
@@ -78,7 +78,7 @@ jobs:
7878
run: |
7979
df -h
8080
- name: Push Linux image
81-
uses: docker/build-push-action@v6.19.2
81+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
8282
with:
8383
context: tools/ci/docker/linux
8484
platforms: linux/amd64

0 commit comments

Comments
 (0)