You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bd...@apache.org on 2025/04/10 15:21:30 UTC
(directory-scimple) 01/01: Update GH Actions to use hashes instead of tags
This is an automated email from the ASF dual-hosted git repository.
bdemers pushed a commit to branch gh-actions-hashes
in repository https://gitbox.apache.org/repos/asf/directory-scimple.git
commit d67c5caa50d1a985878ea77a6332821e8991ab15
Author: Brian Demers <bd...@apache.org>
AuthorDate: Thu Apr 10 11:20:45 2025 -0400
Update GH Actions to use hashes instead of tags
---
.github/workflows/build-reproducible.yml | 6 +++---
.github/workflows/codeql-analysis.yml | 10 +++++-----
.github/workflows/maven.yml | 2 +-
.github/workflows/release.yml | 4 ++--
.github/workflows/snapshot.yml | 4 ++--
5 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/.github/workflows/build-reproducible.yml b/.github/workflows/build-reproducible.yml
index 3b48ad2f..e875340f 100644
--- a/.github/workflows/build-reproducible.yml
+++ b/.github/workflows/build-reproducible.yml
@@ -38,12 +38,12 @@ jobs:
java: [21]
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
with:
ref: ${{ inputs.ref }}
- name: Set up Java ${{ matrix.java }}-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ matrix.java }}
distribution: zulu
@@ -60,7 +60,7 @@ jobs:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
- name: Upload Build Info
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
with:
name: Artifact BuildInfo
path: target/scimple-*.buildinfo
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 79977617..674113bd 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -46,10 +46,10 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
- name: Set up Java 17-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ matrix.javaVersion }}
distribution: ${{ matrix.javaDistribution }}
@@ -57,7 +57,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@v3
+ uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 #v3.28.13
with:
languages: ${{ matrix.language }}
@@ -65,11 +65,11 @@ jobs:
run: ./mvnw verify pmd:aggregate-pmd -Pci
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v3
+ uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 #v3.28.13
with:
category: "/language:${{matrix.language}}"
- name: Upload PMD Analysis
- uses: github/codeql-action/upload-sarif@v3
+ uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 #v3.28.13
with:
sarif_file: target/pmd.sarif.json
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 337637c4..a4e0990c 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -45,7 +45,7 @@ jobs:
maven:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
- name: Set up Java ${{ inputs.java-version }}-${{ inputs.java-distribution }}
uses: actions/setup-java@v4
with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 626d690e..3504175c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,12 +37,12 @@ jobs:
changelog-md: ${{ steps.mvn.outputs.changelog-md }}
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
with:
fetch-depth: 0 # need history to generate the changelog
- name: Set up Java ${{ env.JAVA_VERSION }}-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: zulu
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index 88595b84..7b0f7fe8 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -35,12 +35,12 @@ jobs:
changelog-md: ${{ steps.mvn.outputs.changelog-md }}
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
with:
fetch-depth: 0 # need history to generate the changelog
- name: Set up Java ${{ env.JAVA_VERSION }}-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: zulu