fix: Pin 3rd-party GitHub Actions to commit SHA digests

[ry-ops]

Summary

Pin all 3rd-party GitHub Actions to commit SHA digests for supply chain security.

Actions Pinned

• docker/setup-buildx-action@v3 → docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
• docker/login-action@v3 → docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
• docker/metadata-action@v5 → docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
• docker/build-push-action@v5 → docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
• anthropics/claude-code-action@v1 → anthropics/claude-code-action@2f8ba26a219c06cfb0f468eef8d97055fa814f97 # v1

Workflows Updated

• .github/workflows/docker-build-push.yml (4 actions pinned)
• .github/workflows/claude.yml (1 action pinned)

Test plan

• Verify CI workflows still run successfully

🤖 Generated with Claude Code

---

Summary by cubic

Pinned third-party GitHub Actions to immutable commit digests to harden CI supply chain security. Updated docker-build-push and claude workflows with no functional changes.

• Dependencies
  • Pinned: docker/setup-buildx-action v3, docker/login-action v3, docker/metadata-action v5, docker/build-push-action v5, anthropics/claude-code-action v1.
  • Added version comments for clarity.

^{Written for commit c2ed890. Summary will update on new commits.}

[coderabbitai]

Warning

Rate limit exceeded

@ry-ops has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 22 minutes and 32 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix/pin-github-actions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cubic-dev-ai]

No issues found across 2 files