From ba64231726f890c862e9e519d961a7d9ea5f6635 Mon Sep 17 00:00:00 2001
From: tanzhenxin <tanzhenxing1987@gmail.com>
Date: Fri, 22 Aug 2025 12:08:59 +0800
Subject: [PATCH] chore: fix ratchet check errors

---
 .github/workflows/build-and-publish-image.yml | 12 ++++++------
 .github/workflows/qwen-code-pr-review.yml     |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build-and-publish-image.yml b/.github/workflows/build-and-publish-image.yml
index 7698c002..e25051a0 100644
--- a/.github/workflows/build-and-publish-image.yml
+++ b/.github/workflows/build-and-publish-image.yml
@@ -24,17 +24,17 @@ jobs:
 
     steps:
       - name: 'Checkout repository'
-        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4
+        uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # ratchet:actions/checkout@v5
 
       - name: 'Set up QEMU'
-        uses: 'docker/setup-qemu-action@v3'
+        uses: 'docker/setup-qemu-action@v3' # ratchet:exclude
 
       - name: 'Set up Docker Buildx'
-        uses: 'docker/setup-buildx-action@v3'
+        uses: 'docker/setup-buildx-action@v3' # ratchet:exclude
 
       - name: 'Extract metadata (tags, labels) for Docker'
         id: 'meta'
-        uses: 'docker/metadata-action@v5'
+        uses: 'docker/metadata-action@v5' # ratchet:exclude
         with:
           images: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}'
           tags: |
@@ -47,7 +47,7 @@ jobs:
       - name: 'Log in to the Container registry'
         if: |-
           ${{ github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) }}
-        uses: 'docker/login-action@v3'
+        uses: 'docker/login-action@v3' # ratchet:exclude
         with:
           registry: '${{ env.REGISTRY }}'
           username: '${{ github.actor }}'
@@ -55,7 +55,7 @@ jobs:
 
       - name: 'Build and push Docker image'
         id: 'build-and-push'
-        uses: 'docker/build-push-action@v6'
+        uses: 'docker/build-push-action@v6' # ratchet:exclude
         with:
           context: '.'
           platforms: 'linux/amd64,linux/arm64'
diff --git a/.github/workflows/qwen-code-pr-review.yml b/.github/workflows/qwen-code-pr-review.yml
index 527689a7..1efae14b 100644
--- a/.github/workflows/qwen-code-pr-review.yml
+++ b/.github/workflows/qwen-code-pr-review.yml
@@ -48,7 +48,7 @@ jobs:
       issues: 'write'
     steps:
       - name: 'Checkout PR code'
-        uses: 'actions/checkout@v4'
+        uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # ratchet:actions/checkout@v5
         with:
           token: '${{ secrets.GITHUB_TOKEN }}'
           fetch-depth: 0