From 35e86ea56a64300d141f48a8896fbec34ef12bd3 Mon Sep 17 00:00:00 2001
From: Dongjoon Hyun <dongjoon@apache.org>
Date: Wed, 1 Jul 2026 08:33:56 -0700
Subject: [PATCH] ORC-2182: Pin docker setup actions to approved commit hashes
 to recover CIs

---
 .github/workflows/build_and_test.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 74908e4a2b..9c0817a4f2 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -78,11 +78,11 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v6
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130
       with:
         platforms: linux/riscv64
     - name: Set up Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
     - name: Build Docker image
       run: |
         cd docker/${{ matrix.os }}