You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2024/09/03 06:08:54 UTC
(camel-quarkus) branch main updated: Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron (#6412)
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git
The following commit(s) were added to refs/heads/main by this push:
new 2cd5009790 Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron (#6412)
2cd5009790 is described below
commit 2cd5009790e3544c6ebc18fb3b5be7699ea946fa
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Tue Sep 3 08:08:48 2024 +0200
Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - Quarkus Master Cron (#6412)
---
.github/workflows/quarkus-master-cron.yaml | 48 +++++++++++++++---------------
1 file changed, 24 insertions(+), 24 deletions(-)
diff --git a/.github/workflows/quarkus-master-cron.yaml b/.github/workflows/quarkus-master-cron.yaml
index 6563a8b20b..e273aef8ea 100644
--- a/.github/workflows/quarkus-master-cron.yaml
+++ b/.github/workflows/quarkus-master-cron.yaml
@@ -44,7 +44,7 @@ jobs:
run: |
df -h /
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -53,7 +53,7 @@ jobs:
[ ! -d ~/build-data ] && mkdir -p ~/build-data
echo "${{ github.run_id }}-${{ github.run_number }}-$(uuidgen)" > ~/build-data/build-id.txt
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -92,7 +92,7 @@ jobs:
ls -lh ${{ runner.temp }}/maven-repo.tgz
df -h /
- name: Persist Maven Repo
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
with:
name: maven-repo
path: ${{ runner.temp }}/maven-repo.tgz
@@ -143,7 +143,7 @@ jobs:
matrix: ${{ fromJson(needs.initial-mvn-install.outputs.matrix) }}
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -155,7 +155,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -168,7 +168,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -230,7 +230,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -242,7 +242,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -253,7 +253,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -332,7 +332,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -344,7 +344,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -355,7 +355,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK ${{ matrix.java }}
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: ${{ matrix.java }}
@@ -386,7 +386,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -398,7 +398,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -411,7 +411,7 @@ jobs:
- name: Reclaim Disk Space
run: .github/reclaim-disk-space.sh
- name: Set up JDK 21
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '21'
@@ -443,7 +443,7 @@ jobs:
MAVEN_OPTS: -Xmx3000m
steps:
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -453,7 +453,7 @@ jobs:
tar -xzf ../maven-repo.tgz -C ~
rm -f ../maven-repo.tgz
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -464,7 +464,7 @@ jobs:
git fetch origin main
git rebase $(cat ~/build-data/main-sha.txt)
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
@@ -496,12 +496,12 @@ jobs:
matrix: ${{ fromJson(needs.initial-mvn-install.outputs.examples-matrix) }}
steps:
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -513,7 +513,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0
@@ -581,12 +581,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: '17'
- name: Download Maven Repo
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: maven-repo
path: ..
@@ -598,7 +598,7 @@ jobs:
rm -f ../maven-repo.tgz
df -h /
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
ref: quarkus-main
fetch-depth: 0