From e119dd443983983ebd7a1b30a9d9838da5aa2006 Mon Sep 17 00:00:00 2001 From: Matyas Selmeci Date: Fri, 7 Aug 2026 12:08:34 -0500 Subject: [PATCH] Bump and pin GitHub Actions actions/checkout: v3 -> v7.0.1 docker/build-push-action: v4 -> v7.3.0 docker/login-action: v2.2.0 -> v4.6.0 docker/setup-buildx-action: v2.7.0 -> v4.6.0 peter-evans/repository-dispatch: v2 -> v4.0.1 --- .github/workflows/build-container.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build-container.yml b/.github/workflows/build-container.yml index afea671..7d7c795 100644 --- a/.github/workflows/build-container.yml +++ b/.github/workflows/build-container.yml @@ -42,7 +42,7 @@ jobs: needs: make-date-tag steps: - name: checkout docker-software-base - uses: actions/checkout@v3 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: generate-tag-list env: @@ -67,24 +67,24 @@ jobs: echo "taglist=${tag_list}" >> $GITHUB_OUTPUT - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v2.7.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Log in to Docker Hub if: ${{ !env.ACT }} # Only runs this task when not executing with act - uses: docker/login-action@v2.2.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Log in to OSG Harbor - uses: docker/login-action@v2.2.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: hub.opensciencegrid.org username: ${{ secrets.OSG_HARBOR_ROBOT_USER }} password: ${{ secrets.OSG_HARBOR_ROBOT_PASSWORD }} - name: Build and push Docker images - uses: docker/build-push-action@v4 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 continue-on-error: ${{ matrix.repo == 'development' && (matrix.series == '24')}} with: context: . @@ -115,7 +115,7 @@ jobs: steps: - name: dispatch build ${{ matrix.dispatch-repo }} - uses: peter-evans/repository-dispatch@v2 + uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1 with: token: ${{ secrets.REPO_ACCESS_TOKEN }} repository: opensciencegrid/${{ matrix.dispatch-repo }}