This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-committer-cli.git
The following commit(s) were added to refs/heads/master by this push:
new ba852b8 Fix unapproved docker/setup-buildx-action and
setup-qemu-action SHA in GH workflows - #665 (#52)
ba852b8 is described below
commit ba852b805fa4919a70ba810d14e6d711da51bf15
Author: Robert Munteanu <[email protected]>
AuthorDate: Wed Aug 19 22:29:26 2026 +0200
Fix unapproved docker/setup-buildx-action and setup-qemu-action SHA in GH
workflows - #665 (#52)
The pinned SHAs for docker/setup-buildx-action and setup-qemu-action were
dropped from the ASF INFRA GitHub Actions allowlist, causing docker-push.yml to
fail with startup_failure.
Repin to the currently approved SHAs.
---
.github/workflows/docker-push.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/docker-push.yml
b/.github/workflows/docker-push.yml
index 7dd6c40..70a855d 100644
--- a/.github/workflows/docker-push.yml
+++ b/.github/workflows/docker-push.yml
@@ -49,8 +49,8 @@ jobs:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Set up QEMU # https://github.com/docker/buildx/issues/499
- uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
+ uses:
docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
- name: Set up Docker Buildx
- uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
+ uses:
docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
- name: Push Docker image
run: mvn --batch-mode install docker:push
-Ddocker.platforms=linux/amd64,linux/arm64
