Skip to content

Commit 4cdb9e3

Browse files
vasacvasac
committed
Pin GitHub Actions by SHA
1 parent 6b6b26f commit 4cdb9e3

14 files changed

Lines changed: 85 additions & 85 deletions

‎.github/workflows/build-monitoring.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,27 +20,27 @@ jobs:
2020
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
2121
# the copyright check cannot work out the date of the files from Git.
2222
steps:
23-
- uses: actions/checkout@v4
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
with:
2525
fetch-depth: 0
2626

2727
- name: Cache Go Modules
28-
uses: actions/cache@v4
28+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
2929
with:
3030
path: ~/go/pkg/mod
3131
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
3232
restore-keys: |
3333
${{ runner.os }}-go-mods-
3434
3535
- name: Cache Maven packages
36-
uses: actions/cache@v4
36+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3737
with:
3838
path: ~/.m2
3939
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
4040
restore-keys: ${{ runner.os }}-m2
4141

4242
- name: Set up Go
43-
uses: actions/setup-go@v5
43+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
4444
with:
4545
go-version-file: 'go.mod'
4646

@@ -59,7 +59,7 @@ jobs:
5959
curl -s http://127.0.0.1:3000/api/health
6060
cohctl stop monitoring -y
6161
62-
- uses: actions/upload-artifact@v4
62+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6363
if: failure()
6464
with:
6565
name: test-output

‎.github/workflows/build-test-create-cluster-jdk21.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -31,33 +31,33 @@ jobs:
3131
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
3232
# the copyright check cannot work out the date of the files from Git.
3333
steps:
34-
- uses: actions/checkout@v4
34+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3535
with:
3636
fetch-depth: 0
3737

3838
- name: Set up JDK
39-
uses: actions/setup-java@v4
39+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4040
with:
4141
java-version: ${{ matrix.javaVersion }}
4242
distribution: 'zulu'
4343

4444
- name: Cache Go Modules
45-
uses: actions/cache@v4
45+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4646
with:
4747
path: ~/go/pkg/mod
4848
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
4949
restore-keys: |
5050
${{ runner.os }}-go-mods-
5151
5252
- name: Cache Maven packages
53-
uses: actions/cache@v4
53+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
5454
with:
5555
path: ~/.m2
5656
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
5757
restore-keys: ${{ runner.os }}-m2
5858

5959
- name: Set up Go
60-
uses: actions/setup-go@v5
60+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
6161
with:
6262
go-version-file: 'go.mod'
6363

@@ -79,7 +79,7 @@ jobs:
7979
export PATH=$GRADLE_HOME/bin:$PATH
8080
COHERENCE_VERSION=${{ matrix.coherenceVersion }} make test-create-cluster
8181
82-
- uses: actions/upload-artifact@v4
82+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8383
if: failure()
8484
with:
8585
name: test-output-${{ matrix.coherenceVersion }}-${{ matrix.javaVersion }}

‎.github/workflows/build-test-create-cluster.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -30,33 +30,33 @@ jobs:
3030
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
3131
# the copyright check cannot work out the date of the files from Git.
3232
steps:
33-
- uses: actions/checkout@v4
33+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434
with:
3535
fetch-depth: 0
3636

3737
- name: Set up JDK
38-
uses: actions/setup-java@v4
38+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
3939
with:
4040
java-version: ${{ matrix.javaVersion }}
4141
distribution: 'zulu'
4242

4343
- name: Cache Go Modules
44-
uses: actions/cache@v4
44+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4545
with:
4646
path: ~/go/pkg/mod
4747
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
4848
restore-keys: |
4949
${{ runner.os }}-go-mods-
5050
5151
- name: Cache Maven packages
52-
uses: actions/cache@v4
52+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
5353
with:
5454
path: ~/.m2
5555
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
5656
restore-keys: ${{ runner.os }}-m2
5757

5858
- name: Set up Go
59-
uses: actions/setup-go@v5
59+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
6060
with:
6161
go-version-file: 'go.mod'
6262

@@ -78,7 +78,7 @@ jobs:
7878
export PATH=$GRADLE_HOME/bin:$PATH
7979
COHERENCE_VERSION=${{ matrix.coherenceVersion }} make test-create-cluster
8080
81-
- uses: actions/upload-artifact@v4
81+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8282
if: failure()
8383
with:
8484
name: test-output-${{ matrix.coherenceVersion }}

‎.github/workflows/build-test-create-starter-polyglot.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,20 +23,20 @@ jobs:
2323
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
2424
# the copyright check cannot work out the date of the files from Git.
2525
steps:
26-
- uses: actions/checkout@v4
26+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2727
with:
2828
fetch-depth: 0
2929

3030
- name: Cache Go Modules
31-
uses: actions/cache@v4
31+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3232
with:
3333
path: ~/go/pkg/mod
3434
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
3535
restore-keys: |
3636
${{ runner.os }}-go-mods-
3737
3838
- name: Set up Go
39-
uses: actions/setup-go@v5
39+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
4040
with:
4141
go-version-file: 'go.mod'
4242

@@ -49,7 +49,7 @@ jobs:
4949
run: |
5050
make test-create-starter-polyglot
5151
52-
- uses: actions/upload-artifact@v4
52+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5353
if: failure()
5454
with:
5555
name: test-output-${{ matrix.coherenceVersion }}

‎.github/workflows/build-test-create-starter.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -29,26 +29,26 @@ jobs:
2929
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
3030
# the copyright check cannot work out the date of the files from Git.
3131
steps:
32-
- uses: actions/checkout@v4
32+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3333
with:
3434
fetch-depth: 0
3535

3636
- name: Set up JDK
37-
uses: actions/setup-java@v4
37+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
3838
with:
3939
java-version: ${{ matrix.javaVersion }}
4040
distribution: 'zulu'
4141

4242
- name: Cache Go Modules
43-
uses: actions/cache@v4
43+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4444
with:
4545
path: ~/go/pkg/mod
4646
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
4747
restore-keys: |
4848
${{ runner.os }}-go-mods-
4949
5050
- name: Set up Go
51-
uses: actions/setup-go@v5
51+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
5252
with:
5353
go-version-file: 'go.mod'
5454

@@ -61,7 +61,7 @@ jobs:
6161
run: |
6262
make test-create-starter
6363
64-
- uses: actions/upload-artifact@v4
64+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6565
if: failure()
6666
with:
6767
name: test-output-${{ matrix.coherenceVersion }}

‎.github/workflows/build-test-monitor-cluster-jdk21.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -33,33 +33,33 @@ jobs:
3333
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
3434
# the copyright check cannot work out the date of the files from Git.
3535
steps:
36-
- uses: actions/checkout@v4
36+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3737
with:
3838
fetch-depth: 0
3939

4040
- name: Set up JDK
41-
uses: actions/setup-java@v4
41+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4242
with:
4343
java-version: ${{ matrix.javaVersion }}
4444
distribution: 'zulu'
4545

4646
- name: Cache Go Modules
47-
uses: actions/cache@v4
47+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4848
with:
4949
path: ~/go/pkg/mod
5050
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
5151
restore-keys: |
5252
${{ runner.os }}-go-mods-
5353
5454
- name: Cache Maven packages
55-
uses: actions/cache@v4
55+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
5656
with:
5757
path: ~/.m2
5858
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
5959
restore-keys: ${{ runner.os }}-m2
6060

6161
- name: Set up Go
62-
uses: actions/setup-go@v5
62+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
6363
with:
6464
go-version-file: 'go.mod'
6565

@@ -74,7 +74,7 @@ jobs:
7474
sudo apt-get install expect -y
7575
COHERENCE_VERSION=${{ matrix.coherenceVersion }} make test-monitor-cluster
7676
77-
- uses: actions/upload-artifact@v4
77+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
7878
if: failure()
7979
with:
8080
name: test-output-${{ matrix.coherenceVersion }}-${{ matrix.javaVersion }}

‎.github/workflows/build-test-monitor-health-jdk21.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -33,33 +33,33 @@ jobs:
3333
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
3434
# the copyright check cannot work out the date of the files from Git.
3535
steps:
36-
- uses: actions/checkout@v4
36+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3737
with:
3838
fetch-depth: 0
3939

4040
- name: Set up JDK
41-
uses: actions/setup-java@v4
41+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4242
with:
4343
java-version: ${{ matrix.javaVersion }}
4444
distribution: 'zulu'
4545

4646
- name: Cache Go Modules
47-
uses: actions/cache@v4
47+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4848
with:
4949
path: ~/go/pkg/mod
5050
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
5151
restore-keys: |
5252
${{ runner.os }}-go-mods-
5353
5454
- name: Cache Maven packages
55-
uses: actions/cache@v4
55+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
5656
with:
5757
path: ~/.m2
5858
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
5959
restore-keys: ${{ runner.os }}-m2
6060

6161
- name: Set up Go
62-
uses: actions/setup-go@v5
62+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
6363
with:
6464
go-version-file: 'go.mod'
6565

@@ -95,7 +95,7 @@ jobs:
9595
bin/cohctl monitor health -n localhost:7574 -I -T 120 -w
9696
bin/cohctl stop cluster local -y
9797
bin/cohctl remove cluster local -y
98-
- uses: actions/upload-artifact@v4
98+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9999
if: failure()
100100
with:
101101
name: test-output-${{ matrix.coherenceVersion }}-${{ matrix.javaVersion }}

‎.github/workflows/build-tls.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
2121
# the copyright check cannot work out the date of the files from Git.
2222
steps:
23-
- uses: actions/checkout@v4
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
with:
2525
fetch-depth: 0
2626

@@ -30,28 +30,28 @@ jobs:
3030
docker pull gcr.io/distroless/java17
3131
3232
- name: Set up JDK
33-
uses: actions/setup-java@v4
33+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
3434
with:
3535
java-version: '17'
3636
distribution: 'zulu'
3737

3838
- name: Cache Go Modules
39-
uses: actions/cache@v4
39+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4040
with:
4141
path: ~/go/pkg/mod
4242
key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
4343
restore-keys: |
4444
${{ runner.os }}-go-mods-
4545
4646
- name: Cache Maven packages
47-
uses: actions/cache@v4
47+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4848
with:
4949
path: ~/.m2
5050
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
5151
restore-keys: ${{ runner.os }}-m2
5252

5353
- name: Set up Go
54-
uses: actions/setup-go@v5
54+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
5555
with:
5656
go-version-file: 'go.mod'
5757

@@ -72,7 +72,7 @@ jobs:
7272
cohctl get members
7373
cohctl remove cluster tls -y
7474
75-
- uses: actions/upload-artifact@v4
75+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
7676
if: failure()
7777
with:
7878
name: test-output

‎.github/workflows/build-trivy.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
# Checkout the source, we need a depth of zero to fetch all of the history otherwise
2424
# the copyright check cannot work out the date of the files from Git.
2525
steps:
26-
- uses: actions/checkout@v4
26+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2727
with:
2828
fetch-depth: 0
2929

0 commit comments

Comments
 (0)