This is an automated email from the ASF dual-hosted git repository.
ndimiduk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/yetus.git
The following commit(s) were added to refs/heads/main by this push:
new ed83f876 YETUS-1268. Upgrade and pin docker/setup-qemu-action (v4.0.0)
and docker/login-action (v4.0.0) (#368)
ed83f876 is described below
commit ed83f876e9213378f380c624d70cadd9d78eab5f
Author: Nick Dimiduk <[email protected]>
AuthorDate: Mon Mar 23 14:33:23 2026 +0100
YETUS-1268. Upgrade and pin docker/setup-qemu-action (v4.0.0) and
docker/login-action (v4.0.0) (#368)
* YETUS-1268. Pin docker actions in ghcr.yml to SHA for ASF allowlist
compliance
* yamllint
* upgrade the versions while we're here.
---
.github/workflows/ghcr.yml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/ghcr.yml b/.github/workflows/ghcr.yml
index 09c16a94..9cc02248 100644
--- a/.github/workflows/ghcr.yml
+++ b/.github/workflows/ghcr.yml
@@ -37,14 +37,16 @@ jobs:
fetch-depth: 0
- name: Set up QEMU
id: qemu
- uses: docker/setup-qemu-action@v3
+ # yamllint disable-line rule:line-length
+ uses:
docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
with:
image: tonistiigi/binfmt:qemu-v7.0.0-28
platforms: all
- name: Available platforms
run: echo ${{ steps.qemu.outputs.platforms }}
- name: Login to GitHub Container Registry
- uses: docker/login-action@v3
+ # yamllint disable-line rule:line-length
+ uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 #
v4.0.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
