This is an automated email from the ASF dual-hosted git repository.
yhu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new 600b7d9050e Pin gcp actions (#37926)
600b7d9050e is described below
commit 600b7d9050efe59cc9555a4d1ada6e44a33e132b
Author: Yi Hu <[email protected]>
AuthorDate: Mon Mar 23 19:42:30 2026 -0400
Pin gcp actions (#37926)
---
.github/workflows/beam_CleanUpGCPResources.yml | 2 +-
.github/workflows/beam_Infrastructure_PolicyEnforcer.yml | 2 +-
.github/workflows/beam_Infrastructure_SecurityLogging.yml | 2 +-
.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml | 2 +-
.github/workflows/beam_Infrastructure_UsersPermissions.yml | 2 +-
.github/workflows/beam_Playground_Precommit.yml | 2 +-
.github/workflows/beam_PostCommit_Python_Arm.yml | 4 ++--
.../workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml | 4 ++--
.../beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml | 4 ++--
.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml | 2 +-
.github/workflows/beam_PreCommit_Website_Stage_GCS.yml | 2 +-
.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml | 4 ++--
.github/workflows/beam_Publish_Website.yml | 2 +-
.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml | 4 ++--
.github/workflows/refresh_looker_metrics.yml | 4 ++--
.github/workflows/republish_released_docker_containers.yml | 4 ++--
.github/workflows/run_rc_validation_python_mobile_gaming.yml | 2 +-
.github/workflows/run_rc_validation_python_yaml.yml | 2 +-
18 files changed, 25 insertions(+), 25 deletions(-)
diff --git a/.github/workflows/beam_CleanUpGCPResources.yml
b/.github/workflows/beam_CleanUpGCPResources.yml
index 84c44451bae..571ad048596 100644
--- a/.github/workflows/beam_CleanUpGCPResources.yml
+++ b/.github/workflows/beam_CleanUpGCPResources.yml
@@ -74,7 +74,7 @@ jobs:
with:
disable-cache: true
- name: Setup gcloud
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Install gcloud bigtable cli
run: gcloud components install cbt
- name: run cleanup GCP resources
diff --git a/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
b/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
index 82ab2c0fb60..e0e32e6cf79 100644
--- a/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
+++ b/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
@@ -56,7 +56,7 @@ jobs:
pip install -r requirements.txt
- name: Setup gcloud
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Run IAM Policy Enforcement
working-directory: ./infra/enforcement
diff --git a/.github/workflows/beam_Infrastructure_SecurityLogging.yml
b/.github/workflows/beam_Infrastructure_SecurityLogging.yml
index 106e0cf6d54..c5567533053 100644
--- a/.github/workflows/beam_Infrastructure_SecurityLogging.yml
+++ b/.github/workflows/beam_Infrastructure_SecurityLogging.yml
@@ -58,7 +58,7 @@ jobs:
pip install -r requirements.txt
- name: Setup gcloud
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Initialize Log Sinks
if: github.event_name == 'push' || github.event_name ==
'workflow_dispatch'
diff --git a/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
b/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
index d84f41d158b..b2240306808 100644
--- a/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
+++ b/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
@@ -50,7 +50,7 @@ jobs:
steps:
- uses: actions/checkout@v4
- name: Setup gcloud
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Setup Python
uses: actions/setup-python@v4
diff --git a/.github/workflows/beam_Infrastructure_UsersPermissions.yml
b/.github/workflows/beam_Infrastructure_UsersPermissions.yml
index 04596b756ac..ff13e2908c7 100644
--- a/.github/workflows/beam_Infrastructure_UsersPermissions.yml
+++ b/.github/workflows/beam_Infrastructure_UsersPermissions.yml
@@ -49,7 +49,7 @@ jobs:
with:
ref: ${{ github.event.pull_request.merged == true && github.base_ref
|| github.event.pull_request.head.sha }}
- name: Setup gcloud
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Install Terraform
uses: hashicorp/setup-terraform@v3
with:
diff --git a/.github/workflows/beam_Playground_Precommit.yml
b/.github/workflows/beam_Playground_Precommit.yml
index 2e780ed3310..a67a8e40bcb 100644
--- a/.github/workflows/beam_Playground_Precommit.yml
+++ b/.github/workflows/beam_Playground_Precommit.yml
@@ -75,7 +75,7 @@ jobs:
sudo apt-get install sbt --yes
sudo wget
https://codeload.github.com/spotify/scio.g8/zip/7c1ba7c1651dfd70976028842e721da4107c0d6d
-O scio.g8.zip && unzip scio.g8.zip && sudo mv
scio.g8-7c1ba7c1651dfd70976028842e721da4107c0d6d /opt/scio.g8
- name: Set up Cloud SDK and its components
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
with:
install_components: 'beta,cloud-datastore-emulator'
version: '${{ env.DATASTORE_EMULATOR_VERSION }}'
diff --git a/.github/workflows/beam_PostCommit_Python_Arm.yml
b/.github/workflows/beam_PostCommit_Python_Arm.yml
index a5836733be0..11cd3c718dd 100644
--- a/.github/workflows/beam_PostCommit_Python_Arm.yml
+++ b/.github/workflows/beam_PostCommit_Python_Arm.yml
@@ -84,12 +84,12 @@ jobs:
sudo curl -L
https://github.com/docker/compose/releases/download/1.22.0/docker-compose-$(uname
-s)-$(uname -m) -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose
- name: Authenticate on GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Set up Docker Buildx
uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
- name: GCloud Docker credential helper
diff --git
a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
index 5358b4e07b4..d584d80dd6d 100644
--- a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
@@ -80,12 +80,12 @@ jobs:
java-version: default
python-version: ${{ matrix.python_version }}
- name: Authenticate to GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Configure Docker auth for GCR
run: |
gcloud --quiet auth configure-docker us.gcr.io
diff --git
a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
index fc4287dac92..be53f3a43aa 100644
---
a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
+++
b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
@@ -82,12 +82,12 @@ jobs:
java-version: default
python-version: ${{ matrix.python_version }}
- name: Authenticate to GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Set PY_VER_CLEAN
id: set_py_ver_clean
run: |
diff --git a/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
b/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
index 7cadff17f07..2ddc8d52268 100644
--- a/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
@@ -76,7 +76,7 @@ jobs:
python-version: default
java-version: '11'
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: run PostCommit Yaml Xlang Direct script
uses: ./.github/actions/gradle-command-self-hosted-action
with:
diff --git a/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
b/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
index 203d27a6c22..cd19def6988 100644
--- a/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
+++ b/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
@@ -89,7 +89,7 @@ jobs:
java-version: default
- name: Authenticate on GCP
id: auth-gcp
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
diff --git a/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
b/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
index d3570addffa..6c521a466ec 100644
--- a/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
+++ b/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
@@ -99,12 +99,12 @@ jobs:
- name: Set up Docker Buildx
uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
- name: Authenticate on GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: GCloud Docker credential helper
run: |
gcloud auth configure-docker ${{ env.docker_registry }}
diff --git a/.github/workflows/beam_Publish_Website.yml
b/.github/workflows/beam_Publish_Website.yml
index c20313b7b04..1eeaad37ab3 100644
--- a/.github/workflows/beam_Publish_Website.yml
+++ b/.github/workflows/beam_Publish_Website.yml
@@ -60,7 +60,7 @@ jobs:
disable-cache: true
- name: Authenticate on GCP
id: auth-gcp
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
diff --git a/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
b/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
index ab25aafe6b1..c0f77c9810d 100644
--- a/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
+++ b/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
@@ -77,12 +77,12 @@ jobs:
with:
python-version: ${{ matrix.python_version }}
- name: Authenticate on GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Set up Docker Buildx
uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
- name: GCloud Docker credential helper
diff --git a/.github/workflows/refresh_looker_metrics.yml
b/.github/workflows/refresh_looker_metrics.yml
index 5cb5d0514b3..01720689a35 100644
--- a/.github/workflows/refresh_looker_metrics.yml
+++ b/.github/workflows/refresh_looker_metrics.yml
@@ -37,10 +37,10 @@ jobs:
python-version: 3.11
- run: pip install requests google-cloud-storage looker-sdk
- name: Authenticate on GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- run: python .test-infra/tools/refresh_looker_metrics.py
diff --git a/.github/workflows/republish_released_docker_containers.yml
b/.github/workflows/republish_released_docker_containers.yml
index 99f43961dc3..ac6cf63f54f 100644
--- a/.github/workflows/republish_released_docker_containers.yml
+++ b/.github/workflows/republish_released_docker_containers.yml
@@ -72,12 +72,12 @@ jobs:
with:
python-version: '3.10'
- name: Authenticate on GCP
- uses: google-github-actions/auth@v3
+ uses: google-github-actions/[email protected]
with:
service_account: ${{ secrets.GCP_SA_EMAIL }}
credentials_json: ${{ secrets.GCP_SA_KEY }}
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Set up Docker Buildx
uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
- name: Remove default github maven configuration
diff --git a/.github/workflows/run_rc_validation_python_mobile_gaming.yml
b/.github/workflows/run_rc_validation_python_mobile_gaming.yml
index 27118a13926..2913eb48b27 100644
--- a/.github/workflows/run_rc_validation_python_mobile_gaming.yml
+++ b/.github/workflows/run_rc_validation_python_mobile_gaming.yml
@@ -115,7 +115,7 @@ jobs:
shell: bash
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Download RC Artifacts
run: |
diff --git a/.github/workflows/run_rc_validation_python_yaml.yml
b/.github/workflows/run_rc_validation_python_yaml.yml
index 00a67ddd59a..ac1534d8c06 100644
--- a/.github/workflows/run_rc_validation_python_yaml.yml
+++ b/.github/workflows/run_rc_validation_python_yaml.yml
@@ -102,7 +102,7 @@ jobs:
shell: bash
- name: Set up Cloud SDK
- uses: google-github-actions/setup-gcloud@v3
+ uses: google-github-actions/[email protected]
- name: Download RC Artifacts
run: |