From 1205630c432cbc9641ba331c8784af9df1d67b74 Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Thu, 3 Sep 2026 12:36:36 -0700 Subject: [PATCH] ci: track the actions in the signing jobs by tag again (#11137) The repository tracks actions by tag with dependabot; the signing jobs follow the same convention. Claude-Session: https://claude.ai/code/session_01A5zMqzaUg1Snur4Yg8xJGa --- .github/actions/sign-image/action.yml | 2 +- .github/workflows/container_dev.yml | 16 ++++++++-------- .../workflows/container_foundationdb_version.yml | 12 ++++++------ .github/workflows/container_latest.yml | 8 ++++---- .../workflows/container_release_foundationdb.yml | 12 ++++++------ .github/workflows/container_release_unified.yml | 10 +++++----- 6 files changed, 30 insertions(+), 30 deletions(-) diff --git a/.github/actions/sign-image/action.yml b/.github/actions/sign-image/action.yml index 32b7db04e..405b13b3f 100644 --- a/.github/actions/sign-image/action.yml +++ b/.github/actions/sign-image/action.yml @@ -15,7 +15,7 @@ runs: using: composite steps: - name: Install cosign - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 + uses: sigstore/cosign-installer@v4.1.2 - name: Sign shell: bash diff --git a/.github/workflows/container_dev.yml b/.github/workflows/container_dev.yml index 53d98b94d..201a7b3ee 100644 --- a/.github/workflows/container_dev.yml +++ b/.github/workflows/container_dev.yml @@ -107,10 +107,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 + uses: actions/checkout@v7 - name: Download pre-built Rust binaries - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@v8 with: pattern: rust-bins-* merge-multiple: true @@ -139,7 +139,7 @@ jobs: - name: Docker meta id: docker_meta - uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6 + uses: docker/metadata-action@v6 with: images: | chrislusf/seaweedfs @@ -152,7 +152,7 @@ jobs: org.opencontainers.image.vendor=Chris Lu - name: Set up QEMU - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 + uses: docker/setup-qemu-action@v4.2.0 - name: Create BuildKit config run: | @@ -162,21 +162,21 @@ jobs: EOF - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 + uses: docker/setup-buildx-action@v4 with: buildkitd-flags: "--debug" buildkitd-config: /tmp/buildkitd.toml - name: Login to Docker Hub if: github.event_name != 'pull_request' - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GHCR if: github.event_name != 'pull_request' - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: registry: ghcr.io username: ${{ secrets.GHCR_USERNAME }} @@ -184,7 +184,7 @@ jobs: - name: Build id: build - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@v7 with: context: ./docker push: ${{ github.event_name != 'pull_request' }} diff --git a/.github/workflows/container_foundationdb_version.yml b/.github/workflows/container_foundationdb_version.yml index 076cf3781..bfb39511b 100644 --- a/.github/workflows/container_foundationdb_version.yml +++ b/.github/workflows/container_foundationdb_version.yml @@ -36,7 +36,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -61,7 +61,7 @@ jobs: sudo ldconfig - name: Set up Go - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 + uses: actions/setup-go@v7 with: go-version-file: go.mod @@ -129,14 +129,14 @@ jobs: echo "seaweedfs_ref=$seaweed" >> "$GITHUB_OUTPUT" - name: Set up QEMU - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 + uses: docker/setup-qemu-action@v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 + uses: docker/setup-buildx-action@v4 - name: Login to Docker Hub if: github.event_name != 'pull_request' - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} @@ -158,7 +158,7 @@ jobs: - name: Build and push image id: build - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@v7 with: context: ./docker push: ${{ github.event_name != 'pull_request' }} diff --git a/.github/workflows/container_latest.yml b/.github/workflows/container_latest.yml index cedfa27d7..b8a0ea71c 100644 --- a/.github/workflows/container_latest.yml +++ b/.github/workflows/container_latest.yml @@ -449,7 +449,7 @@ jobs: variant: ${{ fromJSON(needs.setup.outputs.variants) }} steps: - name: Checkout the signing action - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 + uses: actions/checkout@v7 with: sparse-checkout: .github/actions persist-credentials: false @@ -465,19 +465,19 @@ jobs: - name: Docker meta id: docker_meta - uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6 + uses: docker/metadata-action@v6 with: images: | chrislusf/seaweedfs ghcr.io/chrislusf/seaweedfs tags: type=raw,value=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }},suffix=${{ steps.config.outputs.tag_suffix }} - name: Login to Docker Hub - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: registry: ghcr.io username: ${{ secrets.GHCR_USERNAME }} diff --git a/.github/workflows/container_release_foundationdb.yml b/.github/workflows/container_release_foundationdb.yml index 73dae1142..ccc4d0bc9 100644 --- a/.github/workflows/container_release_foundationdb.yml +++ b/.github/workflows/container_release_foundationdb.yml @@ -28,11 +28,11 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 + uses: actions/checkout@v7 - name: Docker meta id: docker_meta - uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6 + uses: docker/metadata-action@v6 with: images: | chrislusf/seaweedfs @@ -46,14 +46,14 @@ jobs: org.opencontainers.image.vendor=Chris Lu - name: Set up QEMU - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 + uses: docker/setup-qemu-action@v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 + uses: docker/setup-buildx-action@v4 - name: Login to Docker Hub if: github.event_name != 'pull_request' - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} @@ -69,7 +69,7 @@ jobs: - name: Build id: build - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 + uses: docker/build-push-action@v7 with: context: ./docker push: ${{ github.event_name != 'pull_request' }} diff --git a/.github/workflows/container_release_unified.yml b/.github/workflows/container_release_unified.yml index 007b259f6..910d77220 100644 --- a/.github/workflows/container_release_unified.yml +++ b/.github/workflows/container_release_unified.yml @@ -315,14 +315,14 @@ jobs: steps: - name: Checkout the signing action if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 + uses: actions/checkout@v7 with: sparse-checkout: .github/actions persist-credentials: false - name: Download digests if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@v8 with: pattern: digest-${{ matrix.variant }}-* merge-multiple: true @@ -330,11 +330,11 @@ jobs: - name: Set up Docker Buildx if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 + uses: docker/setup-buildx-action@v4 - name: Login to GHCR if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: registry: ghcr.io username: ${{ secrets.GHCR_USERNAME }} @@ -356,7 +356,7 @@ jobs: - name: Login to Docker Hub if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }}