You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2024/09/03 05:54:23 UTC
(camel-quarkus) branch commit-sha-workflow-quarkus-master-cron created (now bc534eea5b)
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a change to branch commit-sha-workflow-quarkus-master-cron
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git
at bc534eea5b Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron
This branch includes the following new commits:
new bc534eea5b Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(camel-quarkus) 01/01: Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron
Posted by ac...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a commit to branch commit-sha-workflow-quarkus-master-cron
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git
commit bc534eea5b9ad3313eee875416a5b73b7ee45ec5
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Tue Sep 3 07:54:15 2024 +0200
Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron
---
.github/workflows/quarkus-master-cron.yaml | 48 +++++++++++++++---------------
1 file changed, 24 insertions(+), 24 deletions(-)
diff --git a/.github/workflows/quarkus-master-cron.yaml b/.github/workflows/quarkus-master-cron.yaml
index 6563a8b20b..e273aef8ea 100644
--- a/.github/workflows/quarkus-master-cron.yaml
+++ b/.github/workflows/quarkus-master-cron.yaml
@@ -44,7 +44,7 @@ jobs:
run: |
df -h /
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -53,7 +53,7 @@ jobs:
[ ! -d ~/build-data ] && mkdir -p ~/build-data
echo "${{ github.run_id }}-${{ github.run_number }}-$(uuidgen)" > ~/build-data/build-id.txt
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -92,7 +92,7 @@ jobs:
ls -lh ${{ runner.temp }}/maven-repo.tgz
df -h /
- name: Persist Maven Repo
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
with:
name: maven-repo
path: ${{ runner.temp }}/maven-repo.tgz
@@ -143,7 +143,7 @@ jobs:
matrix: ${{ fromJson(needs.initial-mvn-install.outputs.matrix) }}
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -155,7 +155,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -168,7 +168,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -230,7 +230,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -242,7 +242,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -253,7 +253,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -332,7 +332,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -344,7 +344,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -355,7 +355,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK ${{ matrix.java }}
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: ${{ matrix.java }}
@@ -386,7 +386,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -398,7 +398,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -411,7 +411,7 @@ jobs:
- name: Reclaim Disk Space
run: .github/reclaim-disk-space.sh
- name: Set up JDK 21
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '21'
@@ -443,7 +443,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -453,7 +453,7 @@ jobs:
tar -xzf ../maven-repo.tgz -C ~
rm -f ../maven-repo.tgz
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -464,7 +464,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -496,12 +496,12 @@ jobs:
matrix: ${{ fromJson(needs.initial-mvn-install.outputs.examples-matrix) }}
steps:
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -513,7 +513,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -581,12 +581,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -598,7 +598,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0