BC-5100 - pin docker/build-push-action to version 4.1.1 (#3)

* BC-5100 - pin docker/build-push-action to version 4.1.1 for push workflow * BC-5100 - pin docker/build-push-action to version 4.1.1 for tag workflow
hpi-schul-cloud · Sep 8, 2023 · dee3e90 · dee3e90
1 parent d3a3aeb
commit dee3e90
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Build and push ${{ github.repository }}
         if: ${{ env.IMAGE_EXISTS == 0 }}
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v4.1.1
         with:
           context: .
           file: ./Dockerfile
@@ -105,4 +105,4 @@ jobs:
         if: ${{ always() }}
         uses: github/codeql-action/upload-sarif@v2
         with:
-          sarif_file: 'trivy-results.sarif'
+          sarif_file: 'trivy-results.sarif'
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
@@ -38,7 +38,7 @@ jobs:
           password: ${{ secrets.QUAY_TOKEN }}
 
       - name: Build and push ${{ github.repository }}
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v4.1.1
         with:
           context: .
           file: ./Dockerfile