From 8284320085919212daf5395a7584e1e681a64319 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Thu, 5 Nov 2026 12:46:39 +0100 Subject: [PATCH 1/2] Pin image-pipeline actions to v1.0.0 --- .github/workflows/stackpacks-ci.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/stackpacks-ci.yml b/.github/workflows/stackpacks-ci.yml index e46dad2..d7d9aa2 100644 --- a/.github/workflows/stackpacks-ci.yml +++ b/.github/workflows/stackpacks-ci.yml @@ -276,7 +276,7 @@ jobs: fi - name: Scan image - uses: StackVista/image-pipeline/.github/actions/scan-image@508730536961e38718dbc2403448e2d418b1136f # main + uses: StackVista/image-pipeline/.github/actions/scan-image@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 with: image: ${{ steps.local-image.outputs.ref }} mode: inform @@ -304,7 +304,7 @@ jobs: - name: Apply OCI labels if: steps.publish.outputs.required == 'true' id: oci-labels - uses: StackVista/image-pipeline/.github/actions/apply-oci-labels@f7e766e074b516bb754891a240e6ab2df1e60e4c + uses: StackVista/image-pipeline/.github/actions/apply-oci-labels@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 with: image-name: contrib-stackpacks tag: ${{ steps.tag.outputs.value }} @@ -316,7 +316,7 @@ jobs: - name: Push single-arch image (amd64) if: steps.publish.outputs.required == 'true' - uses: StackVista/image-pipeline/.github/actions/push-single-arch@f7e766e074b516bb754891a240e6ab2df1e60e4c + uses: StackVista/image-pipeline/.github/actions/push-single-arch@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 with: image: quay.io/stackstate/contrib-stackpacks tag: ${{ steps.tag.outputs.value }} @@ -330,7 +330,7 @@ jobs: - name: Push single-arch image (arm64) if: steps.publish.outputs.required == 'true' - uses: StackVista/image-pipeline/.github/actions/push-single-arch@f7e766e074b516bb754891a240e6ab2df1e60e4c + uses: StackVista/image-pipeline/.github/actions/push-single-arch@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 with: image: quay.io/stackstate/contrib-stackpacks tag: ${{ steps.tag.outputs.value }} @@ -344,7 +344,7 @@ jobs: - name: Merge multi-arch manifest if: steps.publish.outputs.required == 'true' - uses: StackVista/image-pipeline/.github/actions/merge-multiarch@f7e766e074b516bb754891a240e6ab2df1e60e4c + uses: StackVista/image-pipeline/.github/actions/merge-multiarch@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 with: image: quay.io/stackstate/contrib-stackpacks tag: ${{ steps.tag.outputs.value }} From 46a0b684a5be35c009bf8a9b05e1ea77ec988866 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Thu, 5 Nov 2026 15:12:20 +0100 Subject: [PATCH 2/2] Pin image-pipeline actions to v1.0.1 --- .github/workflows/stackpacks-ci.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/stackpacks-ci.yml b/.github/workflows/stackpacks-ci.yml index d7d9aa2..a4a1ecb 100644 --- a/.github/workflows/stackpacks-ci.yml +++ b/.github/workflows/stackpacks-ci.yml @@ -276,7 +276,7 @@ jobs: fi - name: Scan image - uses: StackVista/image-pipeline/.github/actions/scan-image@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 + uses: StackVista/image-pipeline/.github/actions/scan-image@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1 with: image: ${{ steps.local-image.outputs.ref }} mode: inform @@ -304,7 +304,7 @@ jobs: - name: Apply OCI labels if: steps.publish.outputs.required == 'true' id: oci-labels - uses: StackVista/image-pipeline/.github/actions/apply-oci-labels@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 + uses: StackVista/image-pipeline/.github/actions/apply-oci-labels@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1 with: image-name: contrib-stackpacks tag: ${{ steps.tag.outputs.value }} @@ -316,7 +316,7 @@ jobs: - name: Push single-arch image (amd64) if: steps.publish.outputs.required == 'true' - uses: StackVista/image-pipeline/.github/actions/push-single-arch@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 + uses: StackVista/image-pipeline/.github/actions/push-single-arch@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1 with: image: quay.io/stackstate/contrib-stackpacks tag: ${{ steps.tag.outputs.value }} @@ -330,7 +330,7 @@ jobs: - name: Push single-arch image (arm64) if: steps.publish.outputs.required == 'true' - uses: StackVista/image-pipeline/.github/actions/push-single-arch@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 + uses: StackVista/image-pipeline/.github/actions/push-single-arch@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1 with: image: quay.io/stackstate/contrib-stackpacks tag: ${{ steps.tag.outputs.value }} @@ -344,7 +344,7 @@ jobs: - name: Merge multi-arch manifest if: steps.publish.outputs.required == 'true' - uses: StackVista/image-pipeline/.github/actions/merge-multiarch@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 + uses: StackVista/image-pipeline/.github/actions/merge-multiarch@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1 with: image: quay.io/stackstate/contrib-stackpacks tag: ${{ steps.tag.outputs.value }}