You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2023/06/24 21:24:16 UTC

[commons-scxml] branch master updated: [StepSecurity] ci: Harden GitHub Actions #133

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-scxml.git


The following commit(s) were added to refs/heads/master by this push:
     new c1abecb  [StepSecurity] ci: Harden GitHub Actions #133
c1abecb is described below

commit c1abecb095e19530c65c23ef6d4b59f8ee5cb880
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Sat Jun 24 17:24:12 2023 -0400

    [StepSecurity] ci: Harden GitHub Actions #133
---
 src/changes/changes.xml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 2ea33f6..1bff93c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -329,6 +329,10 @@
         [11-01-2013] Support for JEXL2 Evaluator.
       </action>
 
+      <action type="fix" dev="ggregory" due-to="step-security-bot, Gary Gregory">
+        [StepSecurity] ci: Harden GitHub Actions #133.
+      </action>
+
       <action type="update" dev="henrib">Bump commons-jexl3 from 3.2.1 to 3.3</action>
       <action type="update" dev="ggregory" due-to="Dependabot">Bump actions/cache from 2.1.4 to current #31, #47, #50, #78.</action>
       <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">Bump actions/checkout from 2 to current #34, #75.</action>