You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2024/08/20 12:39:28 UTC

(camel-kamelets) branch pin-actions-yaks-tests created (now bd95d18b)

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a change to branch pin-actions-yaks-tests
in repository https://gitbox.apache.org/repos/asf/camel-kamelets.git


      at bd95d18b Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - YAKS Tests Action

This branch includes the following new commits:

     new bd95d18b Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - YAKS Tests Action

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



(camel-kamelets) 01/01: Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - YAKS Tests Action

Posted by ac...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch pin-actions-yaks-tests
in repository https://gitbox.apache.org/repos/asf/camel-kamelets.git

commit bd95d18b6884bd1612db73c50d0273d313d3cd70
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Tue Aug 20 14:39:20 2024 +0200

    Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - YAKS Tests Action
---
 .github/workflows/yaks-tests.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/yaks-tests.yaml b/.github/workflows/yaks-tests.yaml
index 0fd5c9f5..4c38b929 100644
--- a/.github/workflows/yaks-tests.yaml
+++ b/.github/workflows/yaks-tests.yaml
@@ -40,16 +40,19 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+permissions:  # added using https://github.com/step-security/secure-repo
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         persist-credentials: false
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         distribution: 'temurin'
         java-version: 17
@@ -74,7 +77,7 @@ jobs:
         echo "Running YAKS tests for Kamelets"
         
         ./mvnw clean verify -pl :camel-kamelets-itest -Denable.yaks.tests
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
       if: failure()
       with:
         name: dumps