docker-img: specify commit id for 3rd-part github actions

Signed-off-by: Bruno Bonaldi Teixeira <[email protected]>
varigit · Jan 13, 2025 · 794da94 · 794da94
1 parent ab18a79
commit 794da94
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/docker-img.yml b/.github/workflows/docker-img.yml
@@ -21,20 +21,20 @@ jobs:
 
     steps:
     - name: Checkout source code
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
 
     - name: Get commit SHA
       run: echo "SHORT_SHA=`echo ${GITHUB_SHA} | cut -c1-8`" >> $GITHUB_ENV
 
     - name: Login to GitHub Packages
-      uses: docker/login-action@v3
+      uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Build and push Docker image
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc
       with:
         context: .
         push: true