fix(ci): pin allowlisted qemu and buildx actions - #632
Merged
Conversation
The Docker image workflow now fails at startup because docker/setup-qemu-action@ce360397 and docker/setup-buildx-action@4d04d5d9 were dropped from the ASF approved actions list. Pin the newest remaining allowlisted SHAs so release/apisix-3.18.0 can publish Hub tags. Signed-off-by: kayx23 <trakydeng@gmail.com>
shreemaan-abhishek
approved these changes
Aug 21, 2026
Yilialinn
approved these changes
Aug 21, 2026
kayx23
added a commit
that referenced
this pull request
Aug 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why submit this pull request?
What changes will this PR take into?
Same class of breakage as #630. apache/apisix-docker#631 merged and its PR CI passed, but Hub never got
apache/apisix:3.18.0-*.Publishing is
Docker imageonpushtorelease/apisix-**. Therelease/apisix-3.18.0run ended instartup_failurebefore any job started:https://github.com/apache/apisix-docker/actions/runs/32466017063
The annotation is:
approved_patterns.ymlcurrently lists:docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2cdocker/login-action@dbcb8138from #630 is still allowlisted and is unchanged.After this merges, cherry-pick onto
release/apisix-3.18.0and push that branch so Hub publish actually runs. Pushing tomasteralone does not push images.Checklist: