Update build-and-publish.yml

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
jaegertracing · Dec 28, 2023 · 30dad63 · 30dad63
1 parent 0b1b7d2
commit 30dad63
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
@@ -19,16 +19,16 @@ jobs:
         verbose: true
 
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3  # v3
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226  # v3
       with:
         install: true
 
     - name: Extract tags/labels from Git
       id: docker_meta
-      uses: docker/metadata-action@v5
+      uses: docker/metadata-action@9dc751fe249ad99385a2583ee0d084c400eee04e  # v5.4.0
       with:
         images: jaegertracing/thrift
         # The 'tags:' section defines how the Docker image will be tagged:
@@ -43,13 +43,13 @@ jobs:
 
     - name: Login to DockerHub
       if: github.event_name != 'pull_request'
-      uses: docker/login-action@v3
+      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d  # v3.0.0
       with:
         username: ${{ secrets.DOCKER_USERNAME }}
         password: ${{ secrets.DOCKER_PASSWORD }}
 
     - name: Build and maybe push Docker image
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56  # v5.1.0
       with:
         push: ${{ github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/') }}
         tags: ${{ steps.docker_meta.outputs.tags }}