This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-neethi.git
The following commit(s) were added to refs/heads/master by this push:
new a8f72c7 Switch to pin GitHub actions
a8f72c7 is described below
commit a8f72c7be8d0705650b7c5e7ad70670bbc85f7ec
Author: Colm O hEigeartaigh <[email protected]>
AuthorDate: Mon Aug 10 16:48:24 2026 +0100
Switch to pin GitHub actions
---
.github/workflows/ci.yml | 6 +++---
.github/workflows/codeql.yml | 6 +++---
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f4643b4..c069dff 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,9 +32,9 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
- uses: actions/checkout@v7
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Cache Maven Repository
- uses: actions/cache@v6
+ uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with:
path: ~/.m2/repository
key: maven-java-${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}
@@ -42,7 +42,7 @@ jobs:
maven-java-${{ matrix.java }}-
maven-
- name: Set up Java
- uses: actions/[email protected]
+ uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 #
v5.7.0
with:
distribution: 'temurin'
java-version: ${{ matrix.java }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 466d2a4..cfd7620 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -72,7 +72,7 @@ jobs:
# your codebase is analyzed, see
https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
steps:
- name: Checkout repository
- uses: actions/checkout@v7
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
# Add any setup steps before running the `github/codeql-action/init`
action.
# This includes steps like installing compilers or runtimes
(`actions/setup-node`
@@ -82,7 +82,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/[email protected]
+ uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38
# v4.37.4
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
@@ -111,6 +111,6 @@ jobs:
exit 1
- name: Perform CodeQL Analysis
- uses: github/codeql-action/[email protected]
+ uses:
github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
with:
category: "/language:${{matrix.language}}"
