(shardingsphere) branch master updated: Pin nightly Docker actions to ASF-approved commits (#40107)

[zhangliang]

This is an automated email from the ASF dual-hosted git repository.

terrymanu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/shardingsphere.git


The following commit(s) were added to refs/heads/master by this push:
     new 98667709e80 Pin nightly Docker actions to ASF-approved commits (#40107)
98667709e80 is described below

commit 98667709e80067dc7cf3b73e15fe61890b20213b
Author: Liang Zhang <zhangli...@apache.org>
AuthorDate: Fri Oct 9 00:03:39 2026 +0800

    Pin nightly Docker actions to ASF-approved commits (#40107)
---
 .github/workflows/nightly-build.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/nightly-build.yml 
b/.github/workflows/nightly-build.yml
index 5cd91f76cfc..033f1254165 100644
--- a/.github/workflows/nightly-build.yml
+++ b/.github/workflows/nightly-build.yml
@@ -85,13 +85,13 @@ jobs:
         with:
           cache-prefix: ${{ 
needs.global-environment.outputs.GLOBAL_CACHE_PREFIX }}
       - name: Login Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # 
v4.6.0
         with:
           registry: ${{ env.HUB }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
+      - uses: 
docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+      - uses: 
docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
       - name: Push Docker Image
         run: ./mvnw -am -pl distribution/proxy -B 
-Prelease,default-dep,docker.buildx.push -DskipTests 
-Dproxy.image.repository=${{ env.PROXY }} -Dproxy.image.tag=${{ github.run_id 
}} clean install
 
@@ -114,7 +114,7 @@ jobs:
       - uses: ./.github/actions/setup-build-environment
         with:
           cache-prefix: ${{ 
needs.global-environment.outputs.GLOBAL_CACHE_PREFIX }}
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # 
v4.6.0
         with:
           registry: ${{ env.HUB }}
           username: ${{ github.actor }}
@@ -147,7 +147,7 @@ jobs:
       - uses: ./.github/actions/setup-build-environment
         with:
           cache-prefix: ${{ 
needs.global-environment.outputs.GLOBAL_CACHE_PREFIX }}
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # 
v4.6.0
         with:
           registry: ${{ env.HUB }}
           username: ${{ github.actor }}