Skip to content

Secure external Github Actions #4460

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Dec 16, 2022
Merged

Secure external Github Actions #4460

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build-src-check.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
run: |
./gradlew -b buildSrc/build.gradle.kts -PenablePluginTests=true check
- name: Publish Test Results
uses: EnricoMi/publish-unit-test-result-action@v1
uses: EnricoMi/publish-unit-test-result-action@94ba6dbddef5ec4aa827fc275cf7d563bc4d398f
with:
files: "**/build/test-results/**/*.xml"
check_name: "buildSrc Test Results"
4 changes: 2 additions & 2 deletions .github/workflows/create_releases.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,11 +15,11 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- name: Create base branch
uses: peterjgrainger/action-create-branch@v2.2.0
uses: peterjgrainger/action-create-branch@c2800a3a9edbba2218da6861fa46496cf8f3195a
with:
branch: 'releases/${{ inputs.name }}'
- name: Create release branch
uses: peterjgrainger/action-create-branch@v2.2.0
uses: peterjgrainger/action-create-branch@c2800a3a9edbba2218da6861fa46496cf8f3195a
with:
branch: 'releases/${{ inputs.name }}.release'

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/diff-javadoc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,6 +62,6 @@ jobs:
> diff.md

- name: Add comment
uses: mshick/add-pr-comment@v2
uses: mshick/add-pr-comment@a65df5f64fc741e91c59b8359a4bc56e57aaf5b1
with:
message-path: diff.md
2 changes: 1 addition & 1 deletion .github/workflows/merge-to-main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
permissions:
pull-requests: write
steps:
- uses: mshick/add-pr-comment@v2
- uses: mshick/add-pr-comment@a65df5f64fc741e91c59b8359a4bc56e57aaf5b1
with:
message: >
### 📝 PRs merging into main branch
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/update-cpp-sdk-on-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@ jobs:
ref: main

- name: Get firebase-workflow-trigger token
uses: tibdex/github-app-token@v1
uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c
id: generate-token
with:
app_id: ${{ secrets.CPP_WORKFLOW_TRIGGER_APP_ID }}
Expand Down