github/workflows/docker-push: fully specify versions

dependabot will keep it up to date.
fsouza · Dec 30, 2021 · e0a22c8 · e0a22c8
1 parent 558adff
commit e0a22c8
Showing 1 changed file with 5 additions and 7 deletions.
diff --git a/.github/workflows/docker-push.yml b/.github/workflows/docker-push.yml
@@ -6,11 +6,9 @@ jobs:
     if: github.event.ref_type == 'tag'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/[email protected]
-
       - name: docker meta
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@v3.6.2
         with:
           images: fsouza/fake-gcs-server
           tags: |
@@ -21,20 +19,20 @@ jobs:
             type=semver,pattern={{major}}
 
       - name: setup qemu
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v1.2.0
 
       - name: setup buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v1.6.0
 
       - name: login to docker hub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v1.12.0
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: build and push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v2.7.0
         with:
           context: .
           push: true