You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2024/08/19 09:31:40 UTC
(camel) 01/01: Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - component-pr workflowCo
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a commit to branch pin-actions-component-pr
in repository https://gitbox.apache.org/repos/asf/camel.git
commit f49ebc0b329b284f3e36295f58fcd0da717a3fe8
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Mon Aug 19 11:31:28 2024 +0200
Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - component-pr workflowCo
---
.github/workflows/component-pr.yaml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/component-pr.yaml b/.github/workflows/component-pr.yaml
index 9d47b7fcadf..7aae4375c65 100644
--- a/.github/workflows/component-pr.yaml
+++ b/.github/workflows/component-pr.yaml
@@ -42,7 +42,7 @@ jobs:
name: Process
runs-on: ubuntu-latest
steps:
- - uses: actions/github-script@v7
+ - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
if: |
github.event_name == 'pull_request_target' &&
(github.event.action == 'opened' ||
@@ -72,7 +72,7 @@ jobs:
})
- name: 'Download artifact'
- uses: actions/github-script@v7
+ uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
if: |
github.event_name == 'workflow_run'
with:
@@ -99,7 +99,7 @@ jobs:
- run: unzip test-logs.zip
if: |
github.event_name == 'workflow_run'
- - uses: actions/github-script@v7
+ - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
if: |
github.event_name == 'workflow_run'
with:
@@ -136,7 +136,7 @@ jobs:
issue_number: issue_number,
body: message
});
- - uses: actions/github-script@v7
+ - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
if: |
github.event_name == 'workflow_run'
with: