This is an automated email from the ASF dual-hosted git repository.

wu-sheng pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/skywalking-cli.git


The following commit(s) were added to refs/heads/master by this push:
     new 90365c4  Fix publish-docker startup_failure: use ASF-approved 
docker/login-action SHA (#231)
90365c4 is described below

commit 90365c4bc59de3704ff81b4cefe55d09f706d00d
Author: 吴晟 Wu Sheng <[email protected]>
AuthorDate: Tue Jun 23 21:32:58 2026 +0800

    Fix publish-docker startup_failure: use ASF-approved docker/login-action 
SHA (#231)
    
    The pinned docker/login-action SHA c94ce9fb... (set in #229) is not on the 
ASF
    GitHub Actions allow-list, so the publish-docker workflow — which only runs 
on
    push to master, hence never exercised by a PR — fails at startup_failure on 
every
    master push. Switch to 650006c6...(v4.2.0), which is on the approved list 
and is
    the SHA apache/skywalking, skywalking-banyandb and skywalking-infra-e2e all 
use.
---
 .github/workflows/publish-docker.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish-docker.yaml 
b/.github/workflows/publish-docker.yaml
index e72414a..cbdcb36 100644
--- a/.github/workflows/publish-docker.yaml
+++ b/.github/workflows/publish-docker.yaml
@@ -45,7 +45,7 @@ jobs:
         with:
           go-version: "1.26"
       - name: Log in to the Container registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # 
v4.2.0
         with:
           registry: ${{ env.HUB }}
           username: ${{ github.actor }}

Reply via email to