wu-sheng opened a new pull request, #229: URL: https://github.com/apache/skywalking-cli/pull/229
## Problem The publish-docker workflow fails on the ASF org with: > The action `docker/[email protected]` is not allowed in apache/skywalking-cli because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns … The ASF GitHub Actions policy only permits third-party actions pinned to an **allowed commit SHA** (version tags like `@v1.10.0` are rejected). ## Fix Pin `docker/login-action` to `c94ce9fb468520275223c153574b00df6fe4bcc9` — the same revision the [apache/skywalking](https://github.com/apache/skywalking) workflows already use (6 occurrences), so it is on the ASF allow-list. The action inputs (`registry` / `username` / `password`) are identical between v1 and this revision, so it is a drop-in change. All other actions in the repo are already either GitHub-owned (`actions/*`) or apache-owned / SHA-pinned (`apache/skywalking-eyes`, `apache/skywalking-infra-e2e`), so this is the only blocked action. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
