From 961c6cbab7bcb90744b9993f494ba509e970af01 Mon Sep 17 00:00:00 2001 From: Wu Sheng Date: Wed, 17 Jun 2026 10:21:25 +0800 Subject: [PATCH] Fix publish-docker startup failure: repin docker/login-action to an Apache-approved SHA The pinned docker/login-action@c94ce9fb (v2-era, 2023) is no longer on Apache INFRA's third-party GitHub Actions allow list, so the publish-docker workflow on `main` fails to start (startup_failure) and the agent base images are not published. Repin to docker/login-action@650006c6 (v4.2.0), which is on the approved list (https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml). --- .github/workflows/publish-docker.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish-docker.yaml b/.github/workflows/publish-docker.yaml index 9bb70eec..7a3e2909 100644 --- a/.github/workflows/publish-docker.yaml +++ b/.github/workflows/publish-docker.yaml @@ -39,7 +39,7 @@ jobs: with: submodules: true - name: Log in to the Container registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ${{ env.HUB }} username: ${{ github.actor }}