You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by ja...@apache.org on 2026/03/31 17:13:41 UTC
(grails-redis) branch pin-workflow-actions-to-approved-hashes created (now 79427f0)
This is an automated email from the ASF dual-hosted git repository.
jamesfredley pushed a change to branch pin-workflow-actions-to-approved-hashes
in repository https://gitbox.apache.org/repos/asf/grails-redis.git
at 79427f0 Pin GitHub Actions to Apache-approved commit hashes
This branch includes the following new commits:
new 79427f0 Pin GitHub Actions to Apache-approved commit hashes
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(grails-redis) 01/01: Pin GitHub Actions to Apache-approved commit hashes
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jamesfredley pushed a commit to branch pin-workflow-actions-to-approved-hashes
in repository https://gitbox.apache.org/repos/asf/grails-redis.git
commit 79427f0c6184807b158e6fb279f4d9c5b86d1fba
Author: James Fredley <ja...@users.noreply.github.com>
AuthorDate: Tue Mar 31 13:13:26 2026 -0400
Pin GitHub Actions to Apache-approved commit hashes
Replace version tags with pinned commit hashes from apache/infrastructure-actions approved_patterns.yml for supply chain security compliance.
- gradle/actions/setup-gradle -> @07231958 (v5.0.2) in gradle.yml, rat.yml, release.yml
- release-drafter/release-drafter@v6 -> @6a93d829 (v6.4.0) in release-notes.yml
- softprops/action-gh-release@v2 -> @153bb8e0 (v2.6.1) in release.yml
Assisted-by: Claude Code <Cl...@Claude.ai>
---
.github/workflows/gradle.yml | 4 ++--
.github/workflows/rat.yml | 2 +-
.github/workflows/release-notes.yml | 2 +-
.github/workflows/release.yml | 12 ++++++------
4 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 0d25f45..de7cbdb 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -55,7 +55,7 @@ jobs:
java-version: 17
distribution: liberica
- name: "🐘 Setup Gradle"
- uses: gradle/actions/setup-gradle@v4
+ uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-access-key: ${{ secrets.GRAILS_DEVELOCITY_ACCESS_KEY }}
- name: "🏃♂️ Run Build"
@@ -79,7 +79,7 @@ jobs:
java-version: 17
distribution: liberica
- name: "🐘 Setup Gradle"
- uses: gradle/actions/setup-gradle@v4
+ uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-access-key: ${{ secrets.GRAILS_DEVELOCITY_ACCESS_KEY }}
- name: "📤 Publish Snapshot Artifacts"
diff --git a/.github/workflows/rat.yml b/.github/workflows/rat.yml
index 11a11af..e1c7c6d 100644
--- a/.github/workflows/rat.yml
+++ b/.github/workflows/rat.yml
@@ -40,7 +40,7 @@ jobs:
distribution: liberica
java-version: 17
- name: "🐘 Setup Gradle"
- uses: gradle/actions/setup-gradle@v4
+ uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-access-key: ${{ secrets.GRAILS_DEVELOCITY_ACCESS_KEY }}
- name: "🧐 Apache License - Release Audit Tool"
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index bbab354..afd0283 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -32,6 +32,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: "📝 Update Release Draft"
- uses: release-drafter/release-drafter@v6
+ uses: release-drafter/release-drafter@6a93d829887aa2e0748befe2e808c66c0ec6e4c7 # v6.4.0
env:
GITHUB_TOKEN: ${{ secrets.GRAILS_GH_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 300944b..23c1a69 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,7 +65,7 @@ jobs:
distribution: ${{ env.JAVA_DISTRIBUTION }}
java-version: ${{ env.JAVA_VERSION }}
- name: "🐘 Setup Gradle"
- uses: gradle/actions/setup-gradle@v5
+ uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-access-key: ${{ secrets.GRAILS_DEVELOCITY_ACCESS_KEY }}
- name: "⚙️ Run pre-release"
@@ -110,7 +110,7 @@ jobs:
- name: "📅 Generate build date file"
run: echo "$SOURCE_DATE_EPOCH" >> build/BUILD_DATE.txt
- name: "📤 Upload build date, checksums and published artifacts files"
- uses: softprops/action-gh-release@v2
+ uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
with:
tag_name: ${{ env.TAG }}
files: |
@@ -196,7 +196,7 @@ jobs:
> "apache-${REPO_NAME}-${VERSION}-src.zip.sha512"
cat "./apache-${REPO_NAME}-${VERSION}-src.zip.sha512"
- name: "🚀 Upload ZIP and Signature to GitHub Release"
- uses: softprops/action-gh-release@v2
+ uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
with:
tag_name: ${{ env.TAG }}
files: |
@@ -304,7 +304,7 @@ jobs:
cd dev-repo
svn info "$VERSION" > "DIST_SVN_REVISION.txt"
- name: "📤 Upload the Distribution SVN revision file"
- uses: softprops/action-gh-release@v2
+ uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
with:
tag_name: ${{ env.TAG }}
files: dev-repo/DIST_SVN_REVISION.txt
@@ -425,7 +425,7 @@ jobs:
distribution: ${{ env.JAVA_DISTRIBUTION }}
java-version: ${{ env.JAVA_VERSION }}
- name: "🐘 Setup Gradle"
- uses: gradle/actions/setup-gradle@v5
+ uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-access-key: ${{ secrets.GRAILS_DEVELOCITY_ACCESS_KEY }}
- name: "🔨 Build Documentation"
@@ -460,7 +460,7 @@ jobs:
distribution: ${{ env.JAVA_DISTRIBUTION }}
java-version: ${{ env.JAVA_VERSION }}
- name: "🐘 Setup Gradle"
- uses: gradle/actions/setup-gradle@v5
+ uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-access-key: ${{ secrets.GRAILS_DEVELOCITY_ACCESS_KEY }}
- name: "⚙️ Run post-release"