[jira] [Closed] (YETUS-1268) Upgrade and pin docker/setup-qemu-action (v4.0.0) and docker/login-action (v4.0.0)

["Allen Wittenauer (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/YETUS-1268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Allen Wittenauer closed YETUS-1268.
-----------------------------------

> Upgrade and pin docker/setup-qemu-action (v4.0.0) and docker/login-action (v4.0.0)
> ----------------------------------------------------------------------------------
>
>                 Key: YETUS-1268
>                 URL: https://issues.apache.org/jira/browse/YETUS-1268
>             Project: Yetus
>          Issue Type: Task
>          Components: build
>            Reporter: Nick Dimiduk
>            Assignee: Nick Dimiduk
>            Priority: Major
>             Fix For: 0.16.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> The Github Container Registry workflow (ghcr.yml) fails with startup_failure because docker/setup-qemu-action@v3 and docker/login-action@v3 use floating tags, which don't match the ASF organization's GitHub Actions allowlist policy. The allowlist requires actions to be pinned to specific commit SHAs.
> Pin both actions to the SHAs already approved in apache/infrastructure-actions:
>  - docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a  (v4.0.0)
>  - docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2  (v4.0.0)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)