You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by sj...@apache.org on 2022/11/12 16:39:03 UTC
[maven-integration-testing] branch gh-action-updates created (now f12a06d3b)
This is an automated email from the ASF dual-hosted git repository.
sjaranowski pushed a change to branch gh-action-updates
in repository https://gitbox.apache.org/repos/asf/maven-integration-testing.git
at f12a06d3b Update actions in GH build
This branch includes the following new commits:
new f12a06d3b Update actions in GH build
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[maven-integration-testing] 01/01: Update actions in GH build
Posted by sj...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
sjaranowski pushed a commit to branch gh-action-updates
in repository https://gitbox.apache.org/repos/asf/maven-integration-testing.git
commit f12a06d3bfe3e40f1ab0a90f78667838e8caf69c
Author: Slawomir Jaranowski <s....@gmail.com>
AuthorDate: Sat Nov 12 17:38:44 2022 +0100
Update actions in GH build
Old actions use deprecated node 12
- checkout v2 -> v3
- setup-java v2 -> v3
- disable access to GITHUB_TOKEN
- don't store credentials with checkout
---
.github/workflows/maven-verify.yml | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml
index 4548530a6..36c06d3c8 100644
--- a/.github/workflows/maven-verify.yml
+++ b/.github/workflows/maven-verify.yml
@@ -19,6 +19,9 @@ name: Java CI
on: [push, pull_request]
+# clare all permissions for GITHUB_TOKEN
+permissions: {}
+
jobs:
build:
strategy:
@@ -30,10 +33,12 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- - uses: actions/checkout@v2
+ - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@v2
+ uses: actions/setup-java@v3
with:
java-version: ${{ matrix.java }}
distribution: 'temurin'