From 07e1c1621518e07176806739cd8cfb8c017ac66d Mon Sep 17 00:00:00 2001 From: Boris Grozev Date: Wed, 15 Apr 2026 16:24:51 -0500 Subject: [PATCH] Pin GitHub Actions to SHA hashes - maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5 - maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9 - maven.yml: codecov/codecov-action@v4 -> b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 - maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5 - maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9 --- .github/workflows/maven.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 9b7f5a19..507b3e91 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -25,10 +25,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up JDK ${{ matrix.java }} - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: distribution: temurin java-version: ${{ matrix.java }} @@ -39,7 +39,7 @@ jobs: - name: Upload coverage report if: matrix.java == env.RELEASE_JAVA_VERSION - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4 with: token: ${{ secrets.CODECOV_TOKEN }} @@ -49,12 +49,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 0 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: distribution: temurin java-version: ${{ env.RELEASE_JAVA_VERSION }}