From 895b98613334f02989324be628921bf49e53711c Mon Sep 17 00:00:00 2001 From: mesutoezdil Date: Thu, 16 Jul 2026 21:26:54 +0200 Subject: [PATCH] ci: pin docker actions to commit SHA login-action and setup-buildx-action used a mutable version tag while every other action in the repo is pinned to a commit SHA. Pin both, and align login-action to the same v4 SHA already used in ci-image.yml. Use the full resolved version in the trailing comment (v3.12.0) to match the more common convention used elsewhere in .github/. --- .github/actions/release-helm-oci/action.yml | 2 +- .github/actions/setup-buildx/action.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/release-helm-oci/action.yml b/.github/actions/release-helm-oci/action.yml index 7444cc224d..d20691ad0f 100644 --- a/.github/actions/release-helm-oci/action.yml +++ b/.github/actions/release-helm-oci/action.yml @@ -34,7 +34,7 @@ runs: using: composite steps: - name: Log in to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/actions/setup-buildx/action.yml b/.github/actions/setup-buildx/action.yml index 3e1d545216..ace7c60f5e 100644 --- a/.github/actions/setup-buildx/action.yml +++ b/.github/actions/setup-buildx/action.yml @@ -23,7 +23,7 @@ runs: using: composite steps: - name: Set up Docker Buildx (local) - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 with: name: ${{ inputs.name }} driver: docker-container