You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2024/08/19 11:00:03 UTC
(camel) branch main updated: Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - PR Build Camel 3 Workflow (#15203)
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git
The following commit(s) were added to refs/heads/main by this push:
new 9e0c5de22c3 Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - PR Build Camel 3 Workflow (#15203)
9e0c5de22c3 is described below
commit 9e0c5de22c3c68431d88eef852f670e9d1db599b
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Mon Aug 19 12:59:46 2024 +0200
Github Actions Security Best practices: Pin Actions to Full lenght Commit SHA - PR Build Camel 3 Workflow (#15203)
---
.github/workflows/pr-build-camel-3.yml | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/pr-build-camel-3.yml b/.github/workflows/pr-build-camel-3.yml
index 953ccf96fe6..b1cdccc50a1 100644
--- a/.github/workflows/pr-build-camel-3.yml
+++ b/.github/workflows/pr-build-camel-3.yml
@@ -36,13 +36,13 @@ jobs:
if: github.repository == 'apache/camel'
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- id: install-mvnd
uses: ./.github/actions/install-mvnd
- name: Set up JDK
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: 11
@@ -50,7 +50,7 @@ jobs:
- name: mvn checkstyle
run: ${{ steps.install-mvnd.outputs.mvnd-dir }}/mvnd -l checkstyle.log $MVND_OPTS -e checkstyle:checkstyle
- name: archive logs
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
if: always()
with:
name: checkstyle.log
@@ -74,7 +74,7 @@ jobs:
matrix:
java: [ '11' ]
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- id: install-packages
@@ -82,7 +82,7 @@ jobs:
- id: install-mvnd
uses: ./.github/actions/install-mvnd
- name: Set up JDK ${{ matrix.java }}
- uses: actions/setup-java@v4
+ uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
with:
distribution: 'temurin'
java-version: ${{ matrix.java }}
@@ -90,7 +90,7 @@ jobs:
- name: maven build
run: ${{ steps.install-mvnd.outputs.mvnd-dir }}/mvnd -l build.log $MVND_OPTS -Pfastinstall -DskipTests install
- name: archive logs
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
if: always()
with:
name: build.log