From 6f3e759ee2758ddca85b39ec3ece474afda7153c Mon Sep 17 00:00:00 2001 From: Robert Munteanu Date: Wed, 19 Aug 2026 18:04:10 +0200 Subject: [PATCH] Fix unapproved docker/setup-buildx-action SHA in GH workflows - #665 The pinned SHA for docker/setup-buildx-action was dropped from the ASF INFRA GitHub Actions allowlist, causing docker-push.yml to fail with startup_failure. Repin to the currently approved v4.2.0 SHA. --- .github/workflows/docker-push.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-push.yml b/.github/workflows/docker-push.yml index 7dd6c40..70a855d 100644 --- a/.github/workflows/docker-push.yml +++ b/.github/workflows/docker-push.yml @@ -49,8 +49,8 @@ jobs: username: ${{ secrets.DOCKERHUB_USER }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Set up QEMU # https://github.com/docker/buildx/issues/499 - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Push Docker image run: mvn --batch-mode install docker:push -Ddocker.platforms=linux/amd64,linux/arm64