You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ozone.apache.org by ad...@apache.org on 2026/05/07 07:50:25 UTC
(ozone-docker) branch slim updated (8e01a4c -> cfcd8d9)
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a change to branch slim
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
from 8e01a4c HDDS-14833. Bump GitHub action versions (#51)
new 7af655e HDDS-14901. Enable Dependabot for github-actions (#52)
new 419691e HDDS-9698. Skip push build for dependabot (#54)
new 537d3db HDDS-15011. Bump docker/login-action to 4.1.0 (#53)
new 3c91a4c HDDS-15043. Bump docker/build-push-action to 7.1.0 (#55)
new cfcd8d9 HDDS-14920. Check actions with zizmor (#56)
The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
build.sh => .github/dependabot.yml | 19 ++++++++++---------
.github/workflows/build-and-tag.yaml | 16 ++++++++++------
.github/workflows/build.yaml | 20 +++++++++++---------
build.sh => .github/workflows/zizmor.yml | 29 ++++++++++++++++++++---------
4 files changed, 51 insertions(+), 33 deletions(-)
copy build.sh => .github/dependabot.yml (77%)
mode change 100755 => 100644
copy build.sh => .github/workflows/zizmor.yml (64%)
mode change 100755 => 100644
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org
(ozone-docker) 04/05: HDDS-15043. Bump docker/build-push-action to 7.1.0 (#55)
Posted by ad...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch slim
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
commit 3c91a4c49356b1e0674bbd9fc562cb612c3477e1
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Apr 16 11:32:40 2026 +0200
HDDS-15043. Bump docker/build-push-action to 7.1.0 (#55)
(cherry picked from commit d4fdb6ab53d0402e6b63bb667560baa78c05ffb7)
---
.github/workflows/build.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 89eb0a8..d65fcba 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -89,7 +89,7 @@ jobs:
- name: Build and push image to GitHub Container Registry
id: build
if: ${{ steps.pull.outputs.success == 'false' }}
- uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+ uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
with:
build-args: OZONE_RUNNER_IMAGE
platforms: linux/amd64,linux/arm64
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org
(ozone-docker) 03/05: HDDS-15011. Bump docker/login-action to 4.1.0 (#53)
Posted by ad...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch slim
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
commit 537d3db8e8a1ccad61b1b909605ef75cab7dd151
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Apr 13 17:50:34 2026 +0200
HDDS-15011. Bump docker/login-action to 4.1.0 (#53)
(cherry picked from commit 71058d274182b430e615a8f5c9b934f9871c2ecf)
---
.github/workflows/build-and-tag.yaml | 4 ++--
.github/workflows/build.yaml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/build-and-tag.yaml b/.github/workflows/build-and-tag.yaml
index 4f0c756..4f37825 100644
--- a/.github/workflows/build-and-tag.yaml
+++ b/.github/workflows/build-and-tag.yaml
@@ -60,7 +60,7 @@ jobs:
docker pull "$IMAGE_ID"
- name: Login to GitHub Container Registry
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
@@ -68,7 +68,7 @@ jobs:
- name: Login to Docker Hub
if: ${{ env.DOCKERHUB_USER }}
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
with:
username: ${{ env.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 6b8d9a0..89eb0a8 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -80,7 +80,7 @@ jobs:
- name: Login to GitHub Container Registry
id: login
if: ${{ github.event_name != 'pull_request' && steps.pull.outputs.success == 'false' }}
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org
(ozone-docker) 01/05: HDDS-14901. Enable Dependabot for github-actions (#52)
Posted by ad...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch slim
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
commit 7af655ea766b393c81b10c9eb17f5f7f56f54796
Author: Doroszlai, Attila <64...@users.noreply.github.com>
AuthorDate: Mon Mar 30 14:56:18 2026 +0200
HDDS-14901. Enable Dependabot for github-actions (#52)
(cherry picked from commit 1002319f000ac73478ea24bb3504ae717c1c2a41)
---
.github/dependabot.yml | 26 ++++++++++++++++++++++++++
.github/workflows/build-and-tag.yaml | 6 +++---
.github/workflows/build.yaml | 10 +++++-----
3 files changed, 34 insertions(+), 8 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..c3f3c4f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,26 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+version: 2
+
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ # 'daily' only runs on weekdays
+ interval: "cron"
+ cronjob: "15 9 * * *"
+ cooldown:
+ default-days: 7
diff --git a/.github/workflows/build-and-tag.yaml b/.github/workflows/build-and-tag.yaml
index 3e7ab00..4f0c756 100644
--- a/.github/workflows/build-and-tag.yaml
+++ b/.github/workflows/build-and-tag.yaml
@@ -41,7 +41,7 @@ jobs:
REGISTRIES: ghcr.io # docker.io is appended dynamically
steps:
- name: Generate tags
- uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf
+ uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
with:
images: |
${{ github.repository_owner }}/ozone
@@ -60,7 +60,7 @@ jobs:
docker pull "$IMAGE_ID"
- name: Login to GitHub Container Registry
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
+ uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
@@ -68,7 +68,7 @@ jobs:
- name: Login to Docker Hub
if: ${{ env.DOCKERHUB_USER }}
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
+ uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
with:
username: ${{ env.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 72e0a26..0474e0f 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -49,7 +49,7 @@ jobs:
steps:
- name: Generate image ID
id: meta
- uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf
+ uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
with:
images: |
ghcr.io/${{ github.repository_owner }}/ozone
@@ -70,16 +70,16 @@ jobs:
- name: Set up QEMU
if: ${{ steps.pull.outputs.success == 'false' }}
- uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
+ uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
- name: Set up Docker Buildx
if: ${{ steps.pull.outputs.success == 'false' }}
- uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
+ uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
- name: Login to GitHub Container Registry
id: login
if: ${{ github.event_name != 'pull_request' && steps.pull.outputs.success == 'false' }}
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
+ uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
@@ -88,7 +88,7 @@ jobs:
- name: Build and push image to GitHub Container Registry
id: build
if: ${{ steps.pull.outputs.success == 'false' }}
- uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+ uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
with:
build-args: OZONE_RUNNER_IMAGE
platforms: linux/amd64,linux/arm64
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org
(ozone-docker) 05/05: HDDS-14920. Check actions with zizmor (#56)
Posted by ad...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch slim
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
commit cfcd8d906ea8087ac9f67840a47705a4222d2c85
Author: Doroszlai, Attila <64...@users.noreply.github.com>
AuthorDate: Fri Apr 17 16:52:36 2026 +0200
HDDS-14920. Check actions with zizmor (#56)
(cherry picked from commit 1ebbe2050eabd89240e5cda04bf1d6f99baa2dae)
---
.github/workflows/build-and-tag.yaml | 10 +++++++---
.github/workflows/build.yaml | 9 +++++----
.github/workflows/zizmor.yml | 36 ++++++++++++++++++++++++++++++++++++
3 files changed, 48 insertions(+), 7 deletions(-)
diff --git a/.github/workflows/build-and-tag.yaml b/.github/workflows/build-and-tag.yaml
index 4f37825..03fd284 100644
--- a/.github/workflows/build-and-tag.yaml
+++ b/.github/workflows/build-and-tag.yaml
@@ -24,13 +24,14 @@ on:
branches:
- 'ozone-**'
-permissions:
- contents: read
- packages: write
+permissions: { }
jobs:
build:
uses: ./.github/workflows/build.yaml
+ permissions:
+ contents: read
+ packages: write
tag:
needs: build
@@ -39,6 +40,9 @@ jobs:
DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
IMAGE_ID: ${{ needs.build.outputs.image-id }}
REGISTRIES: ghcr.io # docker.io is appended dynamically
+ permissions:
+ contents: read
+ packages: write
steps:
- name: Generate tags
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d65fcba..edecb0f 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -35,16 +35,17 @@ concurrency:
group: ${{ github.sha }}
cancel-in-progress: false
-permissions:
- contents: read
- packages: write
-
env:
OZONE_RUNNER_IMAGE: ghcr.io/apache/ozone-runner
+permissions: { }
+
jobs:
build:
runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ packages: write
outputs:
image-id: ${{ steps.meta.outputs.tags }}
steps:
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
new file mode 100644
index 0000000..6b7263f
--- /dev/null
+++ b/.github/workflows/zizmor.yml
@@ -0,0 +1,36 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: zizmor
+
+on:
+ push:
+ pull_request:
+
+permissions: { }
+
+jobs:
+ zizmor:
+ runs-on: ubuntu-latest
+ permissions:
+ security-events: write
+ steps:
+ - name: Checkout project
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ with:
+ persist-credentials: false
+
+ - name: Run zizmor
+ uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org
(ozone-docker) 02/05: HDDS-9698. Skip push build for dependabot (#54)
Posted by ad...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch slim
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
commit 419691e4dfe2e0b3a294ec972bc930fa8dd797c4
Author: Doroszlai, Attila <64...@users.noreply.github.com>
AuthorDate: Mon Apr 13 16:23:34 2026 +0200
HDDS-9698. Skip push build for dependabot (#54)
(cherry picked from commit fb27729dc72b77aa88b377bc3a2ef5428e188bb1)
---
.github/workflows/build.yaml | 1 +
1 file changed, 1 insertion(+)
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 0474e0f..6b8d9a0 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -23,6 +23,7 @@ on:
types: [opened, ready_for_review, synchronize]
push:
branches-ignore:
+ - 'dependabot/**'
- 'ozone-**'
workflow_call:
outputs:
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org