(sling-org-apache-sling-starter) branch master updated: SLING-13145 - Sling Starter GitHub workflows use unapproved actions (#603)

[rombert]

This is an automated email from the ASF dual-hosted git repository.

rombert pushed a commit to branch master
in repository 
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-starter.git


The following commit(s) were added to refs/heads/master by this push:
     new ebfa196  SLING-13145 - Sling Starter GitHub workflows use unapproved 
actions (#603)
ebfa196 is described below

commit ebfa196c897e052ed7b9a5af8e56dd59ad58e88e
Author: Robert Munteanu <romb...@apache.org>
AuthorDate: Wed Mar 25 11:46:38 2026 +0100

    SLING-13145 - Sling Starter GitHub workflows use unapproved actions (#603)
---
 .github/workflows/docker-push.yml    | 6 +++---
 .github/workflows/docker-release.yml | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/docker-push.yml 
b/.github/workflows/docker-push.yml
index fe6d6d0..ce7da7c 100644
--- a/.github/workflows/docker-push.yml
+++ b/.github/workflows/docker-push.yml
@@ -36,13 +36,13 @@ jobs:
           cache: 'maven'
       - name: Login to Docker Hub
         id: login-docker-hub
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Set up QEMU # https://github.com/docker/buildx/issues/499
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Push Docker image
         run: mvn --batch-mode clean install 
-Ddocker.platforms=linux/amd64,linux/arm64 -Dmaven.test.skip=true 
-Ddocker.skip=false -Ddocker.skip.push=false
diff --git a/.github/workflows/docker-release.yml 
b/.github/workflows/docker-release.yml
index a086c3c..8efe89b 100644
--- a/.github/workflows/docker-release.yml
+++ b/.github/workflows/docker-release.yml
@@ -36,14 +36,14 @@ jobs:
           cache: 'maven'
       - name: Login to Docker Hub
         id: login-docker-hub
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Set up QEMU # https://github.com/docker/buildx/issues/499
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Push Docker image
         run: |
           version=$(mvn help:evaluate -Dexpression=project.version -q 
-DforceStdout)