You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@rocketmq.apache.org by "zmuxuny (via GitHub)" <gi...@apache.org> on 2026/09/24 01:58:16 UTC

Re: [PR] [studio] fix(ci): pin Docker actions to Apache-approved SHAs [rocketmq-dashboard]

zmuxuny commented on PR #5020:
URL: https://github.com/apache/rocketmq-dashboard/pull/5020#issuecomment-5806097805

   @lizhimins Could you please review #5020 when you have time? The current workflow still ends in `startup_failure` before creating any jobs on PRs from multiple contributors (for example, [this run on #5060](https://github.com/apache/rocketmq-dashboard/actions/runs/35908452558) and [another contributor's run](https://github.com/apache/rocketmq-dashboard/actions/runs/35911236217)). In contrast, [the run on #5020](https://github.com/apache/rocketmq-dashboard/actions/runs/35838525708) created all five jobs and reached the Docker build. Its remaining job failures are separate from workflow startup and are documented in the PR.
   
   This uses published-tag SHA pins and addresses the concern you raised on #2550. Would this approach be acceptable for fixing the startup blocker? Thanks.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org