From d59897312cde8c778b88d5605882ab754509cf7f Mon Sep 17 00:00:00 2001 From: Jared Hatfield Date: Wed, 24 Jun 2026 22:13:49 +0000 Subject: [PATCH] pin actions/setup-java and maven-dependency-submission-action to SHA --- .github/workflows/build-java-17.yml | 4 ++-- .github/workflows/codeql-java-17.yml | 2 +- .github/workflows/release-maven-central-java-17.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-java-17.yml b/.github/workflows/build-java-17.yml index e479c62..fd6d90d 100644 --- a/.github/workflows/build-java-17.yml +++ b/.github/workflows/build-java-17.yml @@ -23,7 +23,7 @@ jobs: with: persist-credentials: false - name: Set up JDK 17 - uses: actions/setup-java@v5 + uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0 with: java-version: 17 distribution: corretto @@ -36,4 +36,4 @@ jobs: token: ${{ secrets.CODECOV_TOKEN }} slug: ${{ github.repository }} - name: Submit Dependency Snapshot - uses: advanced-security/maven-dependency-submission-action@v5 + uses: advanced-security/maven-dependency-submission-action@b275d12641ac2d2108b2cbb7598b154ad2f2cee8 # v5.0.0 diff --git a/.github/workflows/codeql-java-17.yml b/.github/workflows/codeql-java-17.yml index 1e612a3..6545f0f 100644 --- a/.github/workflows/codeql-java-17.yml +++ b/.github/workflows/codeql-java-17.yml @@ -65,7 +65,7 @@ jobs: queries: security-and-quality # Attempting compatibiltiy with Java 17 - - uses: actions/setup-java@v5 + - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0 with: java-version: 17 distribution: corretto diff --git a/.github/workflows/release-maven-central-java-17.yml b/.github/workflows/release-maven-central-java-17.yml index fbcdf94..0757eda 100644 --- a/.github/workflows/release-maven-central-java-17.yml +++ b/.github/workflows/release-maven-central-java-17.yml @@ -19,7 +19,7 @@ jobs: persist-credentials: false - name: Set up Java for publishing to Maven Central Repository - uses: actions/setup-java@v5 + uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0 with: java-version: 17 distribution: corretto