Pin GitHub actions by commit hash
See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
This commit is contained in:
parent
ebf7eedb14
commit
8893187a3a
20
.github/workflows/ci.yaml
vendored
20
.github/workflows/ci.yaml
vendored
@ -32,25 +32,25 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout Project
|
- name: Checkout Project
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
|
||||||
|
|
||||||
- name: Validate Gradle Wrapper
|
- name: Validate Gradle Wrapper
|
||||||
uses: gradle/wrapper-validation-action@v2
|
uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2.1.1
|
||||||
|
|
||||||
- uses: actions/cache@v4
|
- uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
|
||||||
with:
|
with:
|
||||||
path: |
|
path: |
|
||||||
~/.konan
|
~/.konan
|
||||||
key: ${{ runner.os }}-${{ hashFiles('**/.lock') }}
|
key: ${{ runner.os }}-${{ hashFiles('**/.lock') }}
|
||||||
|
|
||||||
- name: Setup JDK
|
- name: Setup JDK
|
||||||
uses: actions/setup-java@v4
|
uses: actions/setup-java@9704b39bf258b59bc04b50fa2dd55e9ed76b47a8 # v4.1.0
|
||||||
with:
|
with:
|
||||||
distribution: temurin
|
distribution: temurin
|
||||||
java-version: 8
|
java-version: 8
|
||||||
|
|
||||||
- name: Setup Gradle
|
- name: Setup Gradle
|
||||||
uses: gradle/actions/setup-gradle@v3
|
uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
|
||||||
|
|
||||||
- name: Build with Gradle Wrapper
|
- name: Build with Gradle Wrapper
|
||||||
run: ./gradlew ${{ matrix.tasks }}
|
run: ./gradlew ${{ matrix.tasks }}
|
||||||
@ -105,25 +105,25 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout Project
|
- name: Checkout Project
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
|
||||||
|
|
||||||
- name: Validate Gradle Wrapper
|
- name: Validate Gradle Wrapper
|
||||||
uses: gradle/wrapper-validation-action@v2
|
uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2.1.1
|
||||||
|
|
||||||
- uses: actions/cache@v4
|
- uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
|
||||||
with:
|
with:
|
||||||
path: |
|
path: |
|
||||||
~/.konan
|
~/.konan
|
||||||
key: ${{ runner.os }}-${{ hashFiles('**/.lock') }}
|
key: ${{ runner.os }}-${{ hashFiles('**/.lock') }}
|
||||||
|
|
||||||
- name: Setup JDK
|
- name: Setup JDK
|
||||||
uses: actions/setup-java@v4
|
uses: actions/setup-java@9704b39bf258b59bc04b50fa2dd55e9ed76b47a8 # v4.1.0
|
||||||
with:
|
with:
|
||||||
distribution: temurin
|
distribution: temurin
|
||||||
java-version: 8
|
java-version: 8
|
||||||
|
|
||||||
- name: Setup Gradle
|
- name: Setup Gradle
|
||||||
uses: gradle/actions/setup-gradle@v3
|
uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
|
||||||
|
|
||||||
- name: Publish with Gradle Wrapper
|
- name: Publish with Gradle Wrapper
|
||||||
run: ./gradlew ${{ matrix.tasks }}
|
run: ./gradlew ${{ matrix.tasks }}
|
||||||
|
Loading…
Reference in New Issue
Block a user