This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-xmlschema.git


The following commit(s) were added to refs/heads/master by this push:
     new fcccafdf Switch to pin github actions
fcccafdf is described below

commit fcccafdfeaeff0f58bf2d4b0eaa2b082c90213e7
Author: Colm O hEigeartaigh <[email protected]>
AuthorDate: Mon Aug 10 16:48:41 2026 +0100

    Switch to pin github actions
---
 .github/workflows/ci.yml     | 12 ++++++------
 .github/workflows/codeql.yml |  6 +++---
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c31d4c59..6030f25f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,9 +33,9 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
     - name: Checkout
-      uses: actions/checkout@v7
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Cache Maven Repository
-      uses: actions/cache@v6
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: ~/.m2/repository
         key: maven-java-${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}
@@ -43,7 +43,7 @@ jobs:
           maven-java-${{ matrix.java }}-
           maven-
     - name: Set up Java
-      uses: actions/[email protected]
+      uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # 
v5.7.0
       with:
         distribution: 'zulu'
         java-version: ${{ matrix.java }}
@@ -58,9 +58,9 @@ jobs:
     needs: build
     steps:
     - name: Checkout
-      uses: actions/checkout@v7
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Cache Maven Repository
-      uses: actions/cache@v6
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: ~/.m2/repository
         key: maven-deploy-${{ hashFiles('**/pom.xml') }}
@@ -68,7 +68,7 @@ jobs:
           maven-deploy-
           maven-
     - name: Set up Java
-      uses: actions/[email protected]
+      uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # 
v5.7.0
       with:
         distribution: 'zulu'
         java-version: 17
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7eb14eb3..2bcff0d6 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -57,7 +57,7 @@ jobs:
         # your codebase is analyzed, see 
https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v7
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     # Add any setup steps before running the `github/codeql-action/init` 
action.
     # This includes steps like installing compilers or runtimes 
(`actions/setup-node`
@@ -67,7 +67,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/[email protected]
+      uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 
# v4.37.4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -96,6 +96,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/[email protected]
+      uses: 
github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
       with:
         category: "/language:${{matrix.language}}"

Reply via email to