You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bd...@apache.org on 2025/04/10 15:21:29 UTC
(directory-scimple) branch gh-actions-hashes created (now d67c5caa)
This is an automated email from the ASF dual-hosted git repository.
bdemers pushed a change to branch gh-actions-hashes
in repository https://gitbox.apache.org/repos/asf/directory-scimple.git
at d67c5caa Update GH Actions to use hashes instead of tags
This branch includes the following new commits:
new d67c5caa Update GH Actions to use hashes instead of tags
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(directory-scimple) 01/01: Update GH Actions to use hashes instead of tags
Posted by bd...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
bdemers pushed a commit to branch gh-actions-hashes
in repository https://gitbox.apache.org/repos/asf/directory-scimple.git
commit d67c5caa50d1a985878ea77a6332821e8991ab15
Author: Brian Demers <bd...@apache.org>
AuthorDate: Thu Apr 10 11:20:45 2025 -0400
Update GH Actions to use hashes instead of tags
---
.github/workflows/build-reproducible.yml | 6 +++---
.github/workflows/codeql-analysis.yml | 10 +++++-----
.github/workflows/maven.yml | 2 +-
.github/workflows/release.yml | 4 ++--
.github/workflows/snapshot.yml | 4 ++--
5 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/.github/workflows/build-reproducible.yml b/.github/workflows/build-reproducible.yml
index 3b48ad2f..e875340f 100644
--- a/.github/workflows/build-reproducible.yml
+++ b/.github/workflows/build-reproducible.yml
@@ -38,12 +38,12 @@ jobs:
java: [21]
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
with:
ref: ${{ inputs.ref }}
- name: Set up Java ${{ matrix.java }}-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ matrix.java }}
distribution: zulu
@@ -60,7 +60,7 @@ jobs:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
- name: Upload Build Info
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
with:
name: Artifact BuildInfo
path: target/scimple-*.buildinfo
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 79977617..674113bd 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -46,10 +46,10 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
- name: Set up Java 17-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ matrix.javaVersion }}
distribution: ${{ matrix.javaDistribution }}
@@ -57,7 +57,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@v3
+ uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 #v3.28.13
with:
languages: ${{ matrix.language }}
@@ -65,11 +65,11 @@ jobs:
run: ./mvnw verify pmd:aggregate-pmd -Pci
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v3
+ uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 #v3.28.13
with:
category: "/language:${{matrix.language}}"
- name: Upload PMD Analysis
- uses: github/codeql-action/upload-sarif@v3
+ uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 #v3.28.13
with:
sarif_file: target/pmd.sarif.json
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 337637c4..a4e0990c 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -45,7 +45,7 @@ jobs:
maven:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
- name: Set up Java ${{ inputs.java-version }}-${{ inputs.java-distribution }}
uses: actions/setup-java@v4
with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 626d690e..3504175c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,12 +37,12 @@ jobs:
changelog-md: ${{ steps.mvn.outputs.changelog-md }}
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
with:
fetch-depth: 0 # need history to generate the changelog
- name: Set up Java ${{ env.JAVA_VERSION }}-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: zulu
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index 88595b84..7b0f7fe8 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -35,12 +35,12 @@ jobs:
changelog-md: ${{ steps.mvn.outputs.changelog-md }}
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
with:
fetch-depth: 0 # need history to generate the changelog
- name: Set up Java ${{ env.JAVA_VERSION }}-zulu
- uses: actions/setup-java@v4
+ uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 #v4.7.0
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: zulu