From 53eb5e20b69681bb586af753a948e043fef238d1 Mon Sep 17 00:00:00 2001
From: Trustable User <noreply@example.com>
Date: Fri, 10 Jul 2026 14:57:04 +0200
Subject: [PATCH] ci: pin Docker actions by commit

---
 .github/workflows/image.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index e0b740a..e161a24 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -50,19 +50,19 @@ jobs:
         run: |
           echo "IMG_TAG=$(git describe --tags --abbrev=0)" >> "$GITHUB_ENV"
       - name: Registry login
-        uses: docker/login-action@v3
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: registry.hub.docker.com
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
         with:
           image: tonistiigi/binfmt:qemu-v7.0.0-28
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Image
         env:
           REGISTRY: apache
           NAMESPACE: apache
-        run: task buildx PUSH=1 TAG=$IMG_TAG
\ No newline at end of file
+        run: task buildx PUSH=1 TAG=$IMG_TAG