From 3eac2bd7bfc0ea710d96a92a427bca78cc353485 Mon Sep 17 00:00:00 2001 From: aiceflower Date: Thu, 8 Oct 2026 14:21:07 +0800 Subject: [PATCH] #AI COMMIT# [fix][COM][ci] pin third-party GitHub Actions to ASF allowlisted SHAs --- .github/workflows/auto-comment.yml | 42 +++++++++++++------------- .github/workflows/integration-test.yml | 2 +- .github/workflows/publish-docker.yaml | 6 ++-- 3 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/auto-comment.yml b/.github/workflows/auto-comment.yml index aa196e88403..1ab2b7ceb5c 100644 --- a/.github/workflows/auto-comment.yml +++ b/.github/workflows/auto-comment.yml @@ -25,31 +25,31 @@ jobs: runs-on: ubuntu-latest steps: - name: Create comment - uses: actions-cool/issues-helper@v3 - with: - actions: 'create-comment' - token: ${{ secrets.GITHUB_TOKEN }} - issue-number: ${{ github.event.issue.number }} - body: | - ## :blush: Welcome to the Apache Linkis community!! - We are glad that you are contributing by opening this issue. + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: | + gh issue comment "${{ github.event.issue.number }}" \ + --repo "${{ github.repository }}" --body-file - <<'EOF' + ## :blush: Welcome to the Apache Linkis community!! + We are glad that you are contributing by opening this issue. - Please make sure to include all the relevant context. - We will be here shortly. + Please make sure to include all the relevant context. + We will be here shortly. - If you are interested in contributing to our website project, please let us know! - You can check out our contributing guide on - :point_right: [How to Participate in Project Contribution](https://linkis.apache.org/community/how-to-contribute). + If you are interested in contributing to our website project, please let us know! + You can check out our contributing guide on + :point_right: [How to Participate in Project Contribution](https://linkis.apache.org/community/how-to-contribute). - ### Community + ### Community - |WeChat Assistant|WeChat Public Account| - |-|-| - ||| + |WeChat Assistant|WeChat Public Account| + |-|-| + ||| - ### Mailing Lists - |Name|Description|Subscribe|Unsubscribe|Archive| - |:-----|:--------|:------|:-------|:-----| - | [dev@linkis.apache.org](mailto:dev@linkis.apache.org) | community activity information | [subscribe](mailto:dev-subscribe@linkis.apache.org) | [unsubscribe](mailto:dev-unsubscribe@linkis.apache.org) | [archive](http://mail-archives.apache.org/mod_mbox/linkis-dev) | + ### Mailing Lists + |Name|Description|Subscribe|Unsubscribe|Archive| + |:-----|:--------|:------|:-------|:-----| + | [dev@linkis.apache.org](mailto:dev@linkis.apache.org) | community activity information | [subscribe](mailto:dev-subscribe@linkis.apache.org) | [unsubscribe](mailto:dev-unsubscribe@linkis.apache.org) | [archive](http://mail-archives.apache.org/mod_mbox/linkis-dev) | + EOF diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index e5af9803c39..7a0234df2d5 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -96,7 +96,7 @@ jobs: with: node-version: ${{ matrix.node-version }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v1 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build frontend by node.js run: | diff --git a/.github/workflows/publish-docker.yaml b/.github/workflows/publish-docker.yaml index 1b7c675a56d..5d2409745bd 100644 --- a/.github/workflows/publish-docker.yaml +++ b/.github/workflows/publish-docker.yaml @@ -55,9 +55,9 @@ jobs: with: node-version: ${{ matrix.node-version }} - name: Set up QEMU - uses: docker/setup-qemu-action@v1 + uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v1 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build frontend by node.js run: | cd linkis-web @@ -69,7 +69,7 @@ jobs: run: | ./mvnw install -Pdocker -Dmaven.javadoc.skip=true -Dmaven.test.skip=true -Dlinkis.build.web=true -Dlinkis.build.ldh=true - name: Log in to the Container registry - uses: docker/login-action@v1.10.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ env.HUB }} username: ${{ github.actor }}