This is an automated email from the ASF dual-hosted git repository.
mchades pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/main by this push:
new bcb9d2da87 [MINOR] fix(workflow): refresh docker login action SHA for
ASF allowlist (#11908)
bcb9d2da87 is described below
commit bcb9d2da8725a9a4f353de48a5b297c25c686aa3
Author: mchades <[email protected]>
AuthorDate: Mon Jul 6 23:21:56 2026 +0800
[MINOR] fix(workflow): refresh docker login action SHA for ASF allowlist
(#11908)
### What changes were proposed in this pull request?
Update `.github/workflows/docker-image.yml` to replace the expired
`docker/login-action` v4.0.0 SHA with the current ASF-allowlisted
v4.2.0 SHA.
### Why are the changes needed?
The existing
`docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2`
reference is no longer on the ASF allowlist, which causes
`asf-allowlist-check` to fail when scanning repository workflows.
Fix: N/A
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
Ran the ASF allowlist check locally against `.github/**/*.y*ml`;
all 19 unique action refs passed.
---
.github/workflows/docker-image.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/docker-image.yml
b/.github/workflows/docker-image.yml
index 1b0920c84e..b5d9c3fd92 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -118,7 +118,7 @@ jobs:
uses:
docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
- name: Login to Docker Hub
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 #
v4.0.0
+ uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee #
v4.2.0
with:
username: ${{ github.event.inputs.username }}
password: ${{ secrets.DOCKER_REPOSITORY_PASSWORD }}
