diff options
| author | Chris Lu <chrislusf@users.noreply.github.com> | 2022-03-18 13:52:37 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-03-18 13:52:37 -0700 |
| commit | cf95091d40f71b7c1de18105592e6e497bec51bc (patch) | |
| tree | d28da25da1cbb999a6c66de3ab99a8090e3c679d /.github/workflows/container_dev.yml | |
| parent | 2824940ecf62073e00a4d7e2a069b693082b31cf (diff) | |
| parent | dd737bd7554846ad85ed98003c516da35ef34caa (diff) | |
| download | seaweedfs-cf95091d40f71b7c1de18105592e6e497bec51bc.tar.xz seaweedfs-cf95091d40f71b7c1de18105592e6e497bec51bc.zip | |
Merge pull request #2767 from naveensrinivasan/naveen/feat/pin-actions
Pin actions to a full length commit SHA
Diffstat (limited to '.github/workflows/container_dev.yml')
| -rw-r--r-- | .github/workflows/container_dev.yml | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/.github/workflows/container_dev.yml b/.github/workflows/container_dev.yml index 84e995c8e..a8c94f6a4 100644 --- a/.github/workflows/container_dev.yml +++ b/.github/workflows/container_dev.yml @@ -5,6 +5,9 @@ on: branches: [ master ] workflow_dispatch: [] +permissions: + contents: read + jobs: build-dev-containers: @@ -13,11 +16,11 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 - name: Docker meta id: docker_meta - uses: docker/metadata-action@v3 + uses: docker/metadata-action@e5622373a38e60fb6d795a4421e56882f2d7a681 # v3 with: images: | chrislusf/seaweedfs @@ -30,30 +33,30 @@ jobs: org.opencontainers.image.vendor=Chris Lu - name: Set up QEMU - uses: docker/setup-qemu-action@v1 + uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # v1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v1 + uses: docker/setup-buildx-action@94ab11c41e45d028884a99163086648e898eed25 # v1 with: buildkitd-flags: "--debug" - name: Login to Docker Hub if: github.event_name != 'pull_request' - uses: docker/login-action@v1 + uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GHCR if: github.event_name != 'pull_request' - uses: docker/login-action@v1 + uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1 with: registry: ghcr.io username: ${{ secrets.GHCR_USERNAME }} password: ${{ secrets.GHCR_TOKEN }} - name: Build - uses: docker/build-push-action@v2 + uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a # v2 with: context: ./docker push: ${{ github.event_name != 'pull_request' }} |