Skip to content

Pin GitHub Actions to SHA hashes#231

Merged
bgrozev merged 1 commit into
masterfrom
pin-action-versions
Apr 16, 2026
Merged

Pin GitHub Actions to SHA hashes#231
bgrozev merged 1 commit into
masterfrom
pin-action-versions

Conversation

@bgrozev
Copy link
Copy Markdown
Member

@bgrozev bgrozev commented Apr 16, 2026

Pin all GitHub Actions version tags to their corresponding commit SHA hashes for improved supply-chain security.

Original version tags are preserved as comments (e.g. # v4).

- maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9
- maven.yml: codecov/codecov-action@v4 -> b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
- maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 16, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 34.04%. Comparing base (28409d2) to head (07e1c16).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##             master     #231   +/-   ##
=========================================
  Coverage     34.04%   34.04%           
  Complexity      162      162           
=========================================
  Files            36       36           
  Lines          1360     1360           
  Branches        136      136           
=========================================
  Hits            463      463           
  Misses          864      864           
  Partials         33       33           

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 28409d2...07e1c16. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@bgrozev bgrozev merged commit e0e60f3 into master Apr 16, 2026
6 of 7 checks passed
@bgrozev bgrozev deleted the pin-action-versions branch April 16, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants