Merge pull request #37922 from apache/users/damccorm/shas

Pin docker actions to sha for now

Author: Amar3tto

.github/workflows/beam_PostCommit_Go.yml

@@ -73,7 +73,7 @@ jobs:
       - name: Setup environment
         uses: ./.github/actions/setup-environment-action
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io

.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml

@@ -78,7 +78,7 @@ jobs:
           java-version: default
           go-version: default
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io

.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml

@@ -84,7 +84,7 @@ jobs:
             ${{ matrix.java_version != '11' && matrix.java_version || '' }}
             11
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io

.github/workflows/beam_PostCommit_Python_Arm.yml

@@ -91,7 +91,7 @@ jobs:
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io

.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml

@@ -78,7 +78,7 @@ jobs:
         with:
           python-version: default
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: run XVR GoUsingJava Dataflow script
         env:
           USER: github-actions

.github/workflows/beam_PreCommit_CommunityMetrics.yml

@@ -83,7 +83,7 @@ jobs:
         with:
           java-version: default
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Remove default github maven configuration
         run: rm ~/.m2/settings.xml
       - name: Install docker compose

.github/workflows/beam_PreCommit_PythonDocker.yml

@@ -86,7 +86,7 @@ jobs:
           python-version: ${{ matrix.python_version }}
           go-version: default
       - name: Setup Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
         with:
           install: true
           driver: 'docker'

.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml

@@ -97,7 +97,7 @@ jobs:
         if: github.ref == 'refs/heads/master'
         run: echo "LATEST_TAG=,latest" >> $GITHUB_ENV
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Authenticate on GCP
         uses: google-github-actions/auth@v3
         with:

.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml

@@ -84,7 +84,7 @@ jobs:
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: GCloud Docker credential helper
         run: |
           gcloud auth configure-docker us.gcr.io

.github/workflows/build_release_candidate.yml

@@ -285,14 +285,14 @@ jobs:
         with:
           python-version: '3.10'
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
       - name: Remove default github maven configuration
         # This step is a workaround to avoid a decryption issue of Beam's
         # net.linguica.gradle.maven.settings plugin and github's provided maven
         # settings.xml file
         run: rm ~/.m2/settings.xml || true
       - name: Login to Docker Hub
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}