From 68453073841df757b300c5e727a6f36df9c23cb4 Mon Sep 17 00:00:00 2001 From: Harmen Stoppels Date: Mon, 1 Nov 2021 18:44:03 +0100 Subject: Pin actions to a commit sha instead of tag (#26538) --- .github/workflows/build-containers.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to '.github/workflows/build-containers.yml') diff --git a/.github/workflows/build-containers.yml b/.github/workflows/build-containers.yml index a2f6230e71..6e07f66a54 100644 --- a/.github/workflows/build-containers.yml +++ b/.github/workflows/build-containers.yml @@ -35,7 +35,7 @@ jobs: name: Build ${{ matrix.dockerfile[0] }} steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # @v2 - name: Set Container Tag Normal (Nightly) run: | @@ -59,26 +59,26 @@ jobs: fi - name: Set up QEMU - uses: docker/setup-qemu-action@v1 + uses: docker/setup-qemu-action27d0a4f181a40b142cce983c5393082c365d1480 # @v1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v1 + uses: docker/setup-buildx-action@94ab11c41e45d028884a99163086648e898eed25 # @v1 - name: Log in to GitHub Container Registry - uses: docker/login-action@v1 + uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9 # @v1 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Log in to DockerHub - uses: docker/login-action@v1 + uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9 # @v1 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Build & Deploy ${{ matrix.dockerfile[1] }} - uses: docker/build-push-action@v2 + uses: docker/build-push-action@a66e35b9cbcf4ad0ea91ffcaf7bbad63ad9e0229 # @v2 with: file: share/spack/docker/${{matrix.dockerfile[1]}} platforms: ${{ matrix.dockerfile[2] }} -- cgit v1.2.3-60-g2f50