hubcio opened a new pull request, #2999:
URL: https://github.com/apache/iggy/pull/2999

   ASF tightened GitHub Actions enforcement on 2026-03-20,
   switching from "verified creators" to explicit allowlist
   only. Docker actions that worked implicitly now require
   SHA-pinned entries in apache/infrastructure-actions.
   
   Restore docker/setup-buildx-action (reverts shell
   workaround from ba8e865af) and pin all Docker actions
   to approved commit SHAs.
   
   Allowlist PR: https://github.com/apache/infrastructure-actions/pull/547
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to