This is an automated email from the ASF dual-hosted git repository.
xxubai pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/amoro.git
The following commit(s) were added to refs/heads/master by this push:
new ea4ea4cd3 [Hotfix] Pin all external actions to the specific git hash
(#4294)
ea4ea4cd3 is described below
commit ea4ea4cd31ecab35a3d8b7ebf39571d266cac472
Author: ZhouJinsong <[email protected]>
AuthorDate: Mon Jul 27 21:47:28 2026 +0800
[Hotfix] Pin all external actions to the specific git hash (#4294)
* Pin all external actions to the specific git hash
* Update action version
---
.github/workflows/docker-images.yml | 30 +++++++++++++++---------------
1 file changed, 15 insertions(+), 15 deletions(-)
diff --git a/.github/workflows/docker-images.yml
b/.github/workflows/docker-images.yml
index 2f7c47bf3..2e4e946ce 100644
--- a/.github/workflows/docker-images.yml
+++ b/.github/workflows/docker-images.yml
@@ -51,13 +51,13 @@ jobs:
cache: maven
check-latest: false
- name: Set up QEMU
- uses: docker/setup-qemu-action@v2
+ uses:
docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v2
+ uses:
docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3.9.0
- name: Set up Docker tags
- uses: docker/metadata-action@v5
+ uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893
# v5.9.0
id: meta
with:
flavor: |
@@ -76,7 +76,7 @@ jobs:
run: echo '${{ steps.meta.outputs.tags }}'
- name: Login to Docker Hub
- uses: docker/login-action@v2
+ uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.7.0
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -90,7 +90,7 @@ jobs:
run: ./mvnw clean package -pl 'dist' -am -e ${MVN_HADOOP} -DskipTests
-B -ntp -Psupport-all-formats -Pno-extended-disk-storage -Pno-plugin-bin
- name: Build and Push Amoro Docker Image
- uses: docker/build-push-action@v4
+ uses:
docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
with:
context: .
push: true
@@ -115,13 +115,13 @@ jobs:
cache: maven
check-latest: false
- name: Set up QEMU
- uses: docker/setup-qemu-action@v2
+ uses:
docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v2
+ uses:
docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3.9.0
- name: Set up Docker tags
- uses: docker/metadata-action@v5
+ uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893
# v5.9.0
id: meta
with:
flavor: |
@@ -141,7 +141,7 @@ jobs:
run: echo '${{ steps.meta.outputs.tags }}'
- name: Login to Docker Hub
- uses: docker/login-action@v2
+ uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.7.0
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -167,7 +167,7 @@ jobs:
run: ./mvnw clean package -pl 'amoro-optimizer/amoro-optimizer-flink'
-am -e ${OPTIMIZER_FLINK} -DskipTests -B -ntp
- name: Build and Push Flink Optimizer Docker Image
- uses: docker/build-push-action@v4
+ uses:
docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
env:
AMORO_VERSION: ${{ steps.version.outputs.AMORO_VERSION }}
with:
@@ -198,13 +198,13 @@ jobs:
cache: maven
check-latest: false
- name: Set up QEMU
- uses: docker/setup-qemu-action@v2
+ uses:
docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v2
+ uses:
docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3.9.0
- name: Set up Docker tags
- uses: docker/metadata-action@v5
+ uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893
# v5.9.0
id: meta
with:
flavor: |
@@ -222,7 +222,7 @@ jobs:
run: echo '${{ steps.meta.outputs.tags }}'
- name: Login to Docker Hub
- uses: docker/login-action@v2
+ uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.7.0
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -248,7 +248,7 @@ jobs:
run: ./mvnw clean package -pl 'amoro-optimizer/amoro-optimizer-spark'
-am -e ${SPARK_VERSION} -DskipTests -B -ntp
- name: Build and Push Spark Optimizer Docker Image
- uses: docker/build-push-action@v4
+ uses:
docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
env:
AMORO_VERSION: ${{ steps.version.outputs.AMORO_VERSION }}
SPARK_MAJOR_VERSION: ${{ steps.versions.outputs.SPARK_MAJOR_VERSION
}}
