This is an automated email from the ASF dual-hosted git repository.

damccorm pushed a commit to branch users/damccorm/shas
in repository https://gitbox.apache.org/repos/asf/beam.git

commit d9a6159d97f1118645360f8fd3ae04e3a909b5d0
Author: Danny Mccormick <[email protected]>
AuthorDate: Mon Mar 23 15:53:10 2026 -0400

    Pin docker actions to sha for now
---
 .github/workflows/beam_PostCommit_Go.yml                          | 2 +-
 .github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml             | 2 +-
 .github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml  | 2 +-
 .github/workflows/beam_PostCommit_Python_Arm.yml                  | 2 +-
 .github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml    | 2 +-
 .github/workflows/beam_PreCommit_CommunityMetrics.yml             | 2 +-
 .github/workflows/beam_PreCommit_PythonDocker.yml                 | 2 +-
 .github/workflows/beam_Publish_Beam_SDK_Snapshots.yml             | 2 +-
 .github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml | 2 +-
 .github/workflows/build_release_candidate.yml                     | 4 ++--
 .github/workflows/build_runner_image.yml                          | 2 +-
 .github/workflows/finalize_release.yml                            | 2 +-
 .github/workflows/republish_released_docker_containers.yml        | 2 +-
 13 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/beam_PostCommit_Go.yml 
b/.github/workflows/beam_PostCommit_Go.yml
index 96832b063a3..7ae078c25a2 100644
--- a/.github/workflows/beam_PostCommit_Go.yml
+++ b/.github/workflows/beam_PostCommit_Go.yml
@@ -73,7 +73,7 @@ jobs:
       - name: Setup environment
         uses: ./.github/actions/setup-environment-action
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io
diff --git a/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml 
b/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml
index 7502ac8e25c..3740a740546 100644
--- a/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml
+++ b/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml
@@ -78,7 +78,7 @@ jobs:
           java-version: default
           go-version: default
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml 
b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml
index f87be90c0d3..61ff0c72993 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml
@@ -84,7 +84,7 @@ jobs:
             ${{ matrix.java_version != '11' && matrix.java_version || '' }}
             11
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io
diff --git a/.github/workflows/beam_PostCommit_Python_Arm.yml 
b/.github/workflows/beam_PostCommit_Python_Arm.yml
index 9efa53021e8..a5836733be0 100644
--- a/.github/workflows/beam_PostCommit_Python_Arm.yml
+++ b/.github/workflows/beam_PostCommit_Python_Arm.yml
@@ -91,7 +91,7 @@ jobs:
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io
diff --git a/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml 
b/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml
index 0fc285165a7..aa37fe63e1c 100644
--- a/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml
@@ -78,7 +78,7 @@ jobs:
         with:
           python-version: default
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: run XVR GoUsingJava Dataflow script
         env:
           USER: github-actions
diff --git a/.github/workflows/beam_PreCommit_CommunityMetrics.yml 
b/.github/workflows/beam_PreCommit_CommunityMetrics.yml
index fb51e3a3521..09d07eab3a2 100644
--- a/.github/workflows/beam_PreCommit_CommunityMetrics.yml
+++ b/.github/workflows/beam_PreCommit_CommunityMetrics.yml
@@ -83,7 +83,7 @@ jobs:
         with:
           java-version: default
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Remove default github maven configuration
         run: rm ~/.m2/settings.xml
       - name: Install docker compose
diff --git a/.github/workflows/beam_PreCommit_PythonDocker.yml 
b/.github/workflows/beam_PreCommit_PythonDocker.yml
index 9f0b1cb2d5f..4abc4d209ac 100644
--- a/.github/workflows/beam_PreCommit_PythonDocker.yml
+++ b/.github/workflows/beam_PreCommit_PythonDocker.yml
@@ -86,7 +86,7 @@ jobs:
           python-version: ${{ matrix.python_version }}
           go-version: default
       - name: Setup Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
         with:
           install: true
           driver: 'docker'
diff --git a/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml 
b/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
index dfdd680f5ba..d3570addffa 100644
--- a/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
+++ b/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
@@ -97,7 +97,7 @@ jobs:
         if: github.ref == 'refs/heads/master'
         run: echo "LATEST_TAG=,latest" >> $GITHUB_ENV
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Authenticate on GCP
         uses: google-github-actions/auth@v3
         with:
diff --git a/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml 
b/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
index 17d6a291f5a..ab25aafe6b1 100644
--- a/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
+++ b/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
@@ -84,7 +84,7 @@ jobs:
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io
diff --git a/.github/workflows/build_release_candidate.yml 
b/.github/workflows/build_release_candidate.yml
index 66939df18ca..e0328fc08f6 100644
--- a/.github/workflows/build_release_candidate.yml
+++ b/.github/workflows/build_release_candidate.yml
@@ -285,14 +285,14 @@ jobs:
         with:
           python-version: '3.10'
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Remove default github maven configuration
         # This step is a workaround to avoid a decryption issue of Beam's
         # net.linguica.gradle.maven.settings plugin and github's provided maven
         # settings.xml file
         run: rm ~/.m2/settings.xml || true
       - name: Login to Docker Hub
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/.github/workflows/build_runner_image.yml 
b/.github/workflows/build_runner_image.yml
index 0f67b7e7c4b..8ace151cb4e 100644
--- a/.github/workflows/build_runner_image.yml
+++ b/.github/workflows/build_runner_image.yml
@@ -45,7 +45,7 @@ jobs:
       run: |
         gcloud auth configure-docker ${{env.docker_registry}}
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v4
+      uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
     - name: Build and Load to docker
       uses: docker/build-push-action@v6
       with:
diff --git a/.github/workflows/finalize_release.yml 
b/.github/workflows/finalize_release.yml
index b4b98d15a64..0eac53ac02d 100644
--- a/.github/workflows/finalize_release.yml
+++ b/.github/workflows/finalize_release.yml
@@ -41,7 +41,7 @@ jobs:
     runs-on: [self-hosted, ubuntu-20.04, main]
     steps:
     - name: Login to Docker Hub
-      uses: docker/login-action@v4
+      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
       with:
         username: ${{ secrets.DOCKERHUB_USER }}
         password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/.github/workflows/republish_released_docker_containers.yml 
b/.github/workflows/republish_released_docker_containers.yml
index 86a86ce2779..99f43961dc3 100644
--- a/.github/workflows/republish_released_docker_containers.yml
+++ b/.github/workflows/republish_released_docker_containers.yml
@@ -79,7 +79,7 @@ jobs:
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Remove default github maven configuration
         # This step is a workaround to avoid a decryption issue of Beam's
         # net.linguica.gradle.maven.settings plugin and github's provided maven

Reply via email to