You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by sj...@apache.org on 2022/11/12 16:39:04 UTC
[maven-integration-testing] 01/01: Update actions in GH build
This is an automated email from the ASF dual-hosted git repository.
sjaranowski pushed a commit to branch gh-action-updates
in repository https://gitbox.apache.org/repos/asf/maven-integration-testing.git
commit f12a06d3bfe3e40f1ab0a90f78667838e8caf69c
Author: Slawomir Jaranowski <s....@gmail.com>
AuthorDate: Sat Nov 12 17:38:44 2022 +0100
Update actions in GH build
Old actions use deprecated node 12
- checkout v2 -> v3
- setup-java v2 -> v3
- disable access to GITHUB_TOKEN
- don't store credentials with checkout
---
.github/workflows/maven-verify.yml | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml
index 4548530a6..36c06d3c8 100644
--- a/.github/workflows/maven-verify.yml
+++ b/.github/workflows/maven-verify.yml
@@ -19,6 +19,9 @@ name: Java CI
on: [push, pull_request]
+# clare all permissions for GITHUB_TOKEN
+permissions: {}
+
jobs:
build:
strategy:
@@ -30,10 +33,12 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- - uses: actions/checkout@v2
+ - uses: actions/checkout@v3
+ with:
+ persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@v2
+ uses: actions/setup-java@v3
with:
java-version: ${{ matrix.java }}
distribution: 'temurin'