fix(security): remediate workflow vulnerability in .github/workflows/ci.buld.yml

Author: hf-security-analysis[bot]

.github/workflows/ci.buld.yml

@@ -8,7 +8,7 @@ jobs:
 
     steps:
 
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
 
     - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1  # v4
       name: Install pnpm
@@ -39,7 +39,7 @@ jobs:
     needs: build
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130  # v3
@@ -51,8 +51,6 @@ jobs:
         run: |
           
           echo "IMAGE_TAG=${GITHUB_REF##*/}" >> $GITHUB_ENV
-          echo "DOCKER_USERNAME=$DOCKER_USERNAME" >> $GITHUB_ENV
-          echo "DOCKER_PASSWORD=$DOCKER_PASSWORD" >> $GITHUB_ENV
           if [[ $IS_MAIN == 'true' ]]; then
             echo "DOCKER_IMAGE=aisheets/sheets" >> $GITHUB_ENV
             echo "PLATFORMS=linux/amd64,linux/arm64" >> $GITHUB_ENV
@@ -65,17 +63,15 @@ jobs:
             echo "PLATFORMS=linux/amd64" >> $GITHUB_ENV
           fi
         env:
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
           IS_RELEASE: ${{ startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/stable' }}
           IS_MAIN: ${{ github.ref == 'refs/heads/main' }}
 
 
       - name: Login to Docker Hub
         uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9  # v3
         with:
-          username: ${{ env.DOCKER_USERNAME }}
-          password: ${{ env.DOCKER_PASSWORD }}
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Build and push image
         uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25  # v5
@@ -92,4 +88,4 @@ jobs:
           platforms: ${{ env.PLATFORMS }}
           tags: ${{ env.DOCKER_IMAGE }}:latest
           labels: ${{ steps.meta.outputs.labels }}
-          push: true
+          push: true