[ws-wss4j] branch master updated: [StepSecurity] ci: Harden GitHub Actions (#135)

[co...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git


The following commit(s) were added to refs/heads/master by this push:
     new 4f9675922 [StepSecurity] ci: Harden GitHub Actions (#135)
4f9675922 is described below

commit 4f9675922d81c083657bb8a130737477eda559df
Author: StepSecurity Bot <bo...@stepsecurity.io>
AuthorDate: Wed Mar 29 03:57:56 2023 -0700

    [StepSecurity] ci: Harden GitHub Actions (#135)
    
    Signed-off-by: StepSecurity Bot <bo...@stepsecurity.io>
---
 .github/workflows/pull-request-build.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pull-request-build.yaml b/.github/workflows/pull-request-build.yaml
index 3303a4389..a2fe695ca 100644
--- a/.github/workflows/pull-request-build.yaml
+++ b/.github/workflows/pull-request-build.yaml
@@ -15,9 +15,9 @@ jobs:
       pull-requests: read
     timeout-minutes: 130
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0
         with:
           java-version: '11'
           distribution: 'temurin'