Skip to content

Update GitHub Action Versions#193

Merged
snowdream merged 1 commit intomainfrom
gh-actions-update-1762758164
Nov 10, 2025
Merged

Update GitHub Action Versions#193
snowdream merged 1 commit intomainfrom
gh-actions-update-1762758164

Conversation

@snowdream
Copy link
Copy Markdown
Contributor

GitHub Actions Version Updates

Comment thread .github/workflows/main.yml Dismissed
"env.no_proxy='${{ env.no_proxy}}'"
- name: Login to DockerHub
uses: docker/login-action@v3.4.0
uses: docker/login-action@v3.6.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions Continuous Delivery' step
Uses Step
uses 'docker/login-action' with ref 'v3.6.0', not a pinned commit hash
password: ${{ secrets.DOCKER_HUB_TOKEN }}
- name: Login to Quay.io
uses: docker/login-action@v3.4.0
uses: docker/login-action@v3.6.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions Continuous Delivery' step
Uses Step
uses 'docker/login-action' with ref 'v3.6.0', not a pinned commit hash
password: ${{ secrets.QUAY_ROBOT_TOKEN }}
- name: Login to GitHub Container Registry
uses: docker/login-action@v3.4.0
uses: docker/login-action@v3.6.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions Continuous Delivery' step
Uses Step
uses 'docker/login-action' with ref 'v3.6.0', not a pinned commit hash
- name: Docker meta
id: meta
uses: docker/metadata-action@v5.7.0
uses: docker/metadata-action@v5.9.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions Continuous Delivery' step
Uses Step: meta
uses 'docker/metadata-action' with ref 'v5.9.0', not a pinned commit hash
@snowdream snowdream merged commit f986818 into main Nov 10, 2025
4 checks passed
@snowdream snowdream deleted the gh-actions-update-1762758164 branch November 10, 2025 07:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants