You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by sn...@apache.org on 2026/05/06 07:09:20 UTC
(flink-docker) branch master updated (126315d -> 4bf53e7)
This is an automated email from the ASF dual-hosted git repository.
snuyanzin pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/flink-docker.git
from 126315d Update Dockerfiles for 1.20.4 release
new fa1c8f5 [INFRA-27887] Add workflow to check if actions versions are allowed
new 4bf53e7 [INFRA-27887] Use pinned allowed versions for actions
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/check-if-actions-allowed.yml | 60 ++++++++++++++++++++++++++
.github/workflows/docker_push.yml | 8 ++--
.github/workflows/snapshot.yml | 8 ++--
3 files changed, 68 insertions(+), 8 deletions(-)
create mode 100644 .github/workflows/check-if-actions-allowed.yml
(flink-docker) 01/02: [INFRA-27887] Add workflow to check if actions versions are allowed
Posted by sn...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
snuyanzin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/flink-docker.git
commit fa1c8f5ad565cdb34266c8a6e5b4459a36a8afeb
Author: Sergey Nuyanzin <sn...@gmail.com>
AuthorDate: Wed May 6 08:34:20 2026 +0200
[INFRA-27887] Add workflow to check if actions versions are allowed
---
.github/workflows/check-if-actions-allowed.yml | 60 ++++++++++++++++++++++++++
1 file changed, 60 insertions(+)
diff --git a/.github/workflows/check-if-actions-allowed.yml b/.github/workflows/check-if-actions-allowed.yml
new file mode 100644
index 0000000..9316fbd
--- /dev/null
+++ b/.github/workflows/check-if-actions-allowed.yml
@@ -0,0 +1,60 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+# The action is inspired by
+# If versions are not allowed
+# Check https://github.com/apache/infrastructure-actions actions.yml for allowed versions nd use them
+# Or create a PR there to allow required versions
+name: CI checking if required versions are allowed by parent Apache Infra
+
+on:
+ # If you want to run this workflow manually, keep `workflow_dispatch`. Otherwise, remove this trigger.
+ workflow_dispatch:
+ # Trigger the workflow on push or pull requests when the contents of your `.github` directory change.
+ # Note: the cheeck-project-actions.yml workflow inspects the `.github/workflows` and `.github/actions` directories.
+ push:
+ branches:
+ - master
+ paths:
+ - ".github/**"
+ pull_request:
+ paths:
+ - ".github/**"
+
+permissions:
+ # Only read access is required.
+ contents: read
+ # All other permissions are "none".
+
+jobs:
+ # This is the job that verifies your project's usage of approved GitHub actions
+ check:
+ name: Check actions usage
+ uses: apache/infrastructure-actions/.github/workflows/check-project-actions.yml@main
+ permissions:
+ # Only read access to the repository's content.
+ contents: read
+ # All other permissions are "none".
+ # Optionally, you can specify a different repository and/or ref to check. These options are passed to
+ # GitHub actions/checkout, see https://github.com/actions/checkout?tab=readme-ov-file#usage for details.
+ #with:
+ #repository: apache/my-project
+ #ref: my-branch
+ #fetch-depth:
+ #submodules:
(flink-docker) 02/02: [INFRA-27887] Use pinned allowed versions for actions
Posted by sn...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
snuyanzin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/flink-docker.git
commit 4bf53e7fc80fb234d20d380f58a52ee16b2baf13
Author: Sergey Nuyanzin <sn...@gmail.com>
AuthorDate: Wed May 6 08:37:18 2026 +0200
[INFRA-27887] Use pinned allowed versions for actions
---
.github/workflows/docker_push.yml | 8 ++++----
.github/workflows/snapshot.yml | 8 ++++----
2 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/.github/workflows/docker_push.yml b/.github/workflows/docker_push.yml
index a005097..f8bfbf4 100644
--- a/.github/workflows/docker_push.yml
+++ b/.github/workflows/docker_push.yml
@@ -89,13 +89,13 @@ jobs:
uses: actions/checkout@v4
- name: Set up QEMU
- uses: docker/setup-qemu-action@v3
+ uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v3
+ uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
- name: Log in to the Container registry
- uses: docker/login-action@v3
+ uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
@@ -140,7 +140,7 @@ jobs:
echo "Image tags: $TAGS"
- name: Build and push Docker image
- uses: docker/build-push-action@v5
+ uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25
with:
context: ${{ matrix.flink_version }}/scala_2.12-java${{ matrix.java_version }}-ubuntu
file: ${{ matrix.dockerfile }}
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index 5dff054..050f557 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -53,13 +53,13 @@ jobs:
ref: ${{ matrix.branch }}
- name: "Set up QEMU"
- uses: docker/setup-qemu-action@v3
+ uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392
- name: "Set up Docker Buildx"
- uses: docker/setup-buildx-action@v3
+ uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
- name: "Log in to the Container registry"
- uses: docker/login-action@v3
+ uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
@@ -77,7 +77,7 @@ jobs:
run: env
- name: "Build and push Docker images (supported platforms)"
- uses: docker/bake-action@v4
+ uses: docker/bake-action@aefd381cbaa93c62a1e8b02194ae420cc36269d2
with:
files: |
.github/workflows/docker-bake.hcl