Skip to content

Commit 384f464

Browse files
committed
Use SHA instead of versions in GH actions
1 parent 33d80e6 commit 384f464

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

.github/workflows/build.yml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -84,18 +84,19 @@ jobs:
8484
- name: Support longpaths on Windows
8585
if: "startsWith(matrix.os.runs-on, 'windows')"
8686
run: git config --global core.longpaths true
87-
- uses: actions/checkout@v4
87+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
8888
with:
8989
# Fetch the whole history to make sure that gitflow incremental builder
9090
# can find the base commit.
9191
fetch-depth: 0
9292
- name: Set up Java ${{ matrix.os.java.version }}
93-
uses: actions/setup-java@v1
93+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # 4.7.0
9494
with:
9595
java-version: ${{ matrix.os.java.version }}
96+
distribution: temurin
9697
# https://github.com/actions/cache/blob/main/examples.md#java---maven
9798
- name: Cache local Maven repository
98-
uses: actions/cache@v3
99+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # 4.2.2
99100
with:
100101
path: ~/.m2/repository
101102
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -131,7 +132,7 @@ jobs:
131132
echo EOF
132133
} >> "$GITHUB_ENV"
133134
- name: Upload build reports (if build failed)
134-
uses: actions/upload-artifact@v3
135+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # 4.6.1
135136
if: ${{ failure() || cancelled() }}
136137
with:
137138
name: ${{ format('build-reports-{0}', matrix.os.name ) }}

0 commit comments

Comments
 (0)