This is an automated email from the ASF dual-hosted git repository.
yiconghuang pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/main by this push:
new c94bb9eb81 chore: pin external GitHub Actions (#4092)
c94bb9eb81 is described below
commit c94bb9eb812f6b424e8456217cea38fc289b3a46
Author: Arnout Engelen <[email protected]>
AuthorDate: Sun Nov 30 19:12:53 2025 +0100
chore: pin external GitHub Actions (#4092)
### What changes were proposed in this PR?
Pin external GitHub Actions
### Any related issues, documentation, discussions?
Per https://infra.apache.org/github-actions-policy.html
### Was this PR authored or co-authored using generative AI tooling?
No
---
.github/workflows/build-and-push-images.yml | 28 ++++++++++++++--------------
.github/workflows/check-header.yml | 2 +-
.github/workflows/github-action-build.yml | 4 ++--
.github/workflows/lint-pr.yml | 2 +-
4 files changed, 18 insertions(+), 18 deletions(-)
diff --git a/.github/workflows/build-and-push-images.yml
b/.github/workflows/build-and-push-images.yml
index dec5fcf4fb..8a97c1fcfd 100644
--- a/.github/workflows/build-and-push-images.yml
+++ b/.github/workflows/build-and-push-images.yml
@@ -120,9 +120,9 @@ jobs:
java-version: 11
- name: Setup sbt launcher
- uses: sbt/setup-sbt@v1
+ uses: sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd # v1.1.14
- - uses: coursier/cache-action@v6
+ - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c #
v6.4.9
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
@@ -319,9 +319,9 @@ jobs:
java-version: 11
- name: Setup sbt launcher
- uses: sbt/setup-sbt@v1
+ uses: sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd # v1.1.14
- - uses: coursier/cache-action@v6
+ - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c #
v6.4.9
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
@@ -340,16 +340,16 @@ jobs:
df -h
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v3
+ uses:
docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
- name: Log in to Docker Hub
- uses: docker/login-action@v3
+ uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef #
v3.6.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
- name: Build and push AMD64 image
- uses: docker/build-push-action@v6
+ uses:
docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
with:
context: ${{ matrix.context }}
file: ${{ matrix.dockerfile }}
@@ -392,9 +392,9 @@ jobs:
java-version: 11
- name: Setup sbt launcher
- uses: sbt/setup-sbt@v1
+ uses: sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd # v1.1.14
- - uses: coursier/cache-action@v6
+ - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c #
v6.4.9
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
@@ -414,21 +414,21 @@ jobs:
# Set up QEMU for ARM64 emulation
- name: Set up QEMU
- uses: docker/setup-qemu-action@v3
+ uses:
docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
with:
platforms: linux/arm64
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v3
+ uses:
docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
- name: Log in to Docker Hub
- uses: docker/login-action@v3
+ uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef #
v3.6.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
- name: Build and push ARM64 image
- uses: docker/build-push-action@v6
+ uses:
docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
with:
context: ${{ matrix.context }}
file: ${{ matrix.dockerfile }}
@@ -457,7 +457,7 @@ jobs:
steps:
- name: Log in to Docker Hub
- uses: docker/login-action@v3
+ uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef #
v3.6.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
diff --git a/.github/workflows/check-header.yml
b/.github/workflows/check-header.yml
index 0f781236e9..c2cbddc133 100644
--- a/.github/workflows/check-header.yml
+++ b/.github/workflows/check-header.yml
@@ -30,4 +30,4 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- - uses: apache/[email protected]
+ - uses: apache/skywalking-eyes@5c5b974209f0de5d905f37deb69369068ebfc15c
# v0.7.0
diff --git a/.github/workflows/github-action-build.yml
b/.github/workflows/github-action-build.yml
index fabf68053e..5264bd454b 100644
--- a/.github/workflows/github-action-build.yml
+++ b/.github/workflows/github-action-build.yml
@@ -105,8 +105,8 @@ jobs:
distribution: 'temurin'
java-version: 11
- name: Setup sbt launcher
- uses: sbt/setup-sbt@v1
- - uses: coursier/cache-action@v6
+ uses: sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd # v1.1.14
+ - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c #
v6.4.9
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
- name: Lint with scalafmt
diff --git a/.github/workflows/lint-pr.yml b/.github/workflows/lint-pr.yml
index f4151a1904..fcc5d46f0c 100644
--- a/.github/workflows/lint-pr.yml
+++ b/.github/workflows/lint-pr.yml
@@ -31,6 +31,6 @@ jobs:
permissions:
pull-requests: read
steps:
- - uses: amannn/action-semantic-pull-request@v5
+ - uses:
amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 #
v5.5.3
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
