From fdbd5b50a8e657098c631a8af865a9de2ede95a3 Mon Sep 17 00:00:00 2001 From: David Dal Busco Date: Thu, 22 Jan 2026 15:50:53 +0100 Subject: [PATCH] chore: bump and pin gh actions for publish --- .github/workflows/publish.yml | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f75ccb8..50164d1 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -14,18 +14,20 @@ jobs: - image_name: junobuild/api steps: - - name: Check out the repo - uses: actions/checkout@v4 + - name: Checkout + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + with: + persist-credentials: false - name: Log in to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_TOKEN }} - name: Extract metadata (tags, labels) for Docker id: meta - uses: docker/metadata-action@v4 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 with: images: ${{ matrix.image_name }} tags: | @@ -33,7 +35,7 @@ jobs: type=semver,pattern={{version}} - name: Build and push Docker image for ${{ matrix.image_name }} - uses: docker/build-push-action@v5 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . platforms: linux/amd64