You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ozone.apache.org by ad...@apache.org on 2026/10/17 06:04:24 UTC
(ozone-docker) branch latest updated: HDDS-16816. Pin first-party actions to a major version tag (#108)
This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch latest
in repository https://gitbox.apache.org/repos/asf/ozone-docker.git
The following commit(s) were added to refs/heads/latest by this push:
new 1a86f02 HDDS-16816. Pin first-party actions to a major version tag (#108)
1a86f02 is described below
commit 1a86f0275667167176a2b16f01899701352039bb
Author: Doroszlai, Attila <64...@users.noreply.github.com>
AuthorDate: Sat Oct 17 08:04:18 2026 +0200
HDDS-16816. Pin first-party actions to a major version tag (#108)
---
.github/workflows/asf-allowlist-check.yaml | 4 ++--
.github/workflows/zizmor.yml | 4 +++-
.github/zizmor.yaml | 21 +++++++++++++++++++++
3 files changed, 26 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yaml b/.github/workflows/asf-allowlist-check.yaml
index 6e5f1a5..75804f3 100644
--- a/.github/workflows/asf-allowlist-check.yaml
+++ b/.github/workflows/asf-allowlist-check.yaml
@@ -40,10 +40,10 @@ jobs:
runs-on: ubuntu-slim
steps:
- name: Checkout project
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ uses: actions/checkout@v7
with:
persist-credentials: false
- name: Check actions
- uses: apache/infrastructure-actions/allowlist-check@47b297bbe90f580139129bee531bd84bd95b7f5d # allowlist-check/v1.0.4
+ uses: apache/infrastructure-actions/allowlist-check@allowlist-check/v1
with:
scan-glob: ".github/workflows/*.y*ml"
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 0b0b168..980847c 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -23,9 +23,11 @@ on:
- '**'
paths:
- '.github/workflows/**'
+ - '.github/zizmor.y*ml'
pull_request:
paths:
- '.github/workflows/**'
+ - '.github/zizmor.y*ml'
permissions: { }
@@ -40,7 +42,7 @@ jobs:
security-events: write
steps:
- name: Checkout project
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ uses: actions/checkout@v7
with:
persist-credentials: false
diff --git a/.github/zizmor.yaml b/.github/zizmor.yaml
new file mode 100644
index 0000000..b502f74
--- /dev/null
+++ b/.github/zizmor.yaml
@@ -0,0 +1,21 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+rules:
+ unpinned-uses:
+ config:
+ policies:
+ actions/*: ref-pin
+ apache/*: ref-pin
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@ozone.apache.org
For additional commands, e-mail: commits-help@ozone.apache.org