This is an automated email from the ASF dual-hosted git repository. AlinsRan pushed a commit to branch push-210 in repository https://gitbox.apache.org/repos/asf/apisix-ingress-controller.git
commit e1edfd82603216ebd9bfca5f20953d4484cc8a2b Author: rongxin <[email protected]> AuthorDate: Thu May 28 14:00:54 2026 +0800 ci: fix workflow failures by upgrading actions to comply with Apache allowlist - Upgrade actions/setup-go from v4 to v5 across all workflows (v4 uses deprecated Node.js 16, causing startup_failure) - Pin docker/setup-qemu-action, docker/setup-buildx-action, and docker/login-action to SHA commits approved in Apache's organization allowlist (tag references like @v3 are blocked by policy) The Apache organization enforces a strict GitHub Actions allowlist policy (maintained in apache/infrastructure-actions). Only actions pinned to approved commit SHAs are permitted to run. Using tag references for third-party actions (outside actions/*/github/*) results in startup_failure. Fixes: https://github.com/apache/apisix-ingress-controller/actions/runs/26492256243 Co-authored-by: Copilot <[email protected]> --- .github/workflows/apisix-conformance-test.yml | 2 +- .github/workflows/apisix-e2e-test.yml | 4 ++-- .github/workflows/benchmark-test.yml | 2 +- .github/workflows/golangci-lint.yml | 2 +- .github/workflows/lint-checker.yml | 2 +- .github/workflows/push-docker.yaml | 15 ++++++++------- .github/workflows/unit-test.yml | 2 +- 7 files changed, 15 insertions(+), 14 deletions(-) diff --git a/.github/workflows/apisix-conformance-test.yml b/.github/workflows/apisix-conformance-test.yml index 39485cad..87a2910e 100644 --- a/.github/workflows/apisix-conformance-test.yml +++ b/.github/workflows/apisix-conformance-test.yml @@ -50,7 +50,7 @@ jobs: submodules: recursive - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" diff --git a/.github/workflows/apisix-e2e-test.yml b/.github/workflows/apisix-e2e-test.yml index ff4fb8c4..3f435485 100644 --- a/.github/workflows/apisix-e2e-test.yml +++ b/.github/workflows/apisix-e2e-test.yml @@ -52,7 +52,7 @@ jobs: submodules: recursive - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" @@ -126,7 +126,7 @@ jobs: submodules: recursive - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" diff --git a/.github/workflows/benchmark-test.yml b/.github/workflows/benchmark-test.yml index 05834508..0a6a85c3 100644 --- a/.github/workflows/benchmark-test.yml +++ b/.github/workflows/benchmark-test.yml @@ -60,7 +60,7 @@ jobs: submodules: recursive - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index 38e9701e..c858da86 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -32,7 +32,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" diff --git a/.github/workflows/lint-checker.yml b/.github/workflows/lint-checker.yml index edc14726..f0b5587b 100644 --- a/.github/workflows/lint-checker.yml +++ b/.github/workflows/lint-checker.yml @@ -66,7 +66,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" - name: run gofmt diff --git a/.github/workflows/push-docker.yaml b/.github/workflows/push-docker.yaml index 2ac894f0..4d6cac84 100644 --- a/.github/workflows/push-docker.yaml +++ b/.github/workflows/push-docker.yaml @@ -22,6 +22,7 @@ on: - '*' branches: - master + - push-210 # temporary: remove after image is built jobs: docker: @@ -33,27 +34,27 @@ jobs: ref: ${{ github.ref }} submodules: recursive - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 - name: Login to Registry - uses: docker/login-action@v3 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: username: ${{ secrets.DOCKERHUB_USER }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Build and push multi-arch image (Tag) - if: github.ref_type == 'tag' + if: github.ref_type == 'tag' || github.ref_name == 'push-210' env: - TAG: ${{ github.ref_name }} - IMAGE_TAG: ${{ github.ref_name }} + TAG: ${{ github.ref_type == 'tag' && github.ref_name || '2.1.0' }} + IMAGE_TAG: ${{ github.ref_type == 'tag' && github.ref_name || '2.1.0' }} run: | echo "building multi-arch images with tag: $TAG" make build-push-multi-arch-image diff --git a/.github/workflows/unit-test.yml b/.github/workflows/unit-test.yml index 8c7018b0..2d1c4b8c 100644 --- a/.github/workflows/unit-test.yml +++ b/.github/workflows/unit-test.yml @@ -32,7 +32,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Setup Go Env - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: go-version: "1.24" - name: Run unit test
