Skip to content

Commit a945845

Browse files
marko-bekhtamarko-bekhta
committed
[hibernate#2097] Use SHA instead of versions in GH actions
1 parent 5fa510b commit a945845

File tree

2 files changed

+23
-23
lines changed

2 files changed

+23
-23
lines changed

‎.github/workflows/build.yml

+18-18
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ jobs:
8181
- 5432:5432
8282
steps:
8383
- name: Checkout ${{ inputs.branch }}
84-
uses: actions/checkout@v2
84+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8585
with:
8686
ref: ${{ inputs.branch }}
8787
- name: Get year/month for cache key
@@ -90,7 +90,7 @@ jobs:
9090
echo "::set-output name=yearmonth::$(/bin/date -u "+%Y-%m")"
9191
shell: bash
9292
- name: Cache Gradle downloads
93-
uses: actions/cache@v4
93+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
9494
id: cache-gradle
9595
with:
9696
path: |
@@ -101,13 +101,13 @@ jobs:
101101
key: gradle-examples-${{ matrix.db }}-${{ steps.get-date.outputs.yearmonth }}
102102
- name: Set up JDK 11
103103
if: ${{ startsWith( inputs.branch, 'wip/2' ) }}
104-
uses: actions/setup-java@v2.2.0
104+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
105105
with:
106106
distribution: 'temurin'
107107
java-version: 11
108108
- name: Set up JDK 17
109109
if: ${{ !startsWith( inputs.branch, 'wip/2' ) }}
110-
uses: actions/setup-java@v2.2.0
110+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
111111
with:
112112
distribution: 'temurin'
113113
java-version: 17
@@ -116,7 +116,7 @@ jobs:
116116
- name: Run examples in '${{ matrix.example }}' on ${{ matrix.db }}
117117
run: ./gradlew :${{ matrix.example }}:runAllExamplesOn${{ matrix.db }}
118118
- name: Upload reports (if build failed)
119-
uses: actions/upload-artifact@v4
119+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
120120
if: failure()
121121
with:
122122
name: reports-examples-${{ matrix.db }}
@@ -130,7 +130,7 @@ jobs:
130130
db: [ 'MariaDB', 'MySQL', 'PostgreSQL', 'MSSQLServer', 'CockroachDB', 'Db2', 'Oracle' ]
131131
steps:
132132
- name: Checkout ${{ inputs.branch }}
133-
uses: actions/checkout@v2
133+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
134134
with:
135135
ref: ${{ inputs.branch }}
136136
- name: Get year/month for cache key
@@ -139,7 +139,7 @@ jobs:
139139
echo "::set-output name=yearmonth::$(/bin/date -u "+%Y-%m")"
140140
shell: bash
141141
- name: Cache Gradle downloads
142-
uses: actions/cache@v4
142+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
143143
id: cache-gradle
144144
with:
145145
path: |
@@ -150,13 +150,13 @@ jobs:
150150
key: gradle-db-${{ matrix.db }}-${{ steps.get-date.outputs.yearmonth }}
151151
- name: Set up JDK 11
152152
if: ${{ startsWith( inputs.branch, 'wip/2' ) }}
153-
uses: actions/setup-java@v2.2.0
153+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
154154
with:
155155
distribution: 'temurin'
156156
java-version: 11
157157
- name: Set up JDK 17
158158
if: ${{ !startsWith( inputs.branch, 'wip/2' ) }}
159-
uses: actions/setup-java@v2.2.0
159+
uses: actions/setup-java@v3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
160160

161161
with:
162162
distribution: 'temurin'
@@ -166,7 +166,7 @@ jobs:
166166
- name: Build and Test with ${{ matrix.db }}
167167
run: ./gradlew build -PshowStandardOutput -Pdocker -Pdb=${{ matrix.db }}
168168
- name: Upload reports (if build failed)
169-
uses: actions/upload-artifact@v4
169+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
170170
if: failure()
171171
with:
172172
name: reports-db-${{ matrix.db }}
@@ -196,7 +196,7 @@ jobs:
196196
- { name: "25-ea", java_version_numeric: 25, from: 'jdk.java.net', jvm_args: '--enable-preview' }
197197
steps:
198198
- name: Checkout ${{ inputs.branch }}
199-
uses: actions/checkout@v2
199+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
200200
with:
201201
ref: ${{ inputs.branch }}
202202
- name: Get year/month for cache key
@@ -217,7 +217,7 @@ jobs:
217217
echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
218218
- name: Cache Maven/Gradle Dependency/Dist Caches
219219
id: cache-maven
220-
uses: actions/cache@v4
220+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
221221
# if it's not a pull request, we restore and save the cache
222222
if: github.event_name != 'pull_request'
223223
with:
@@ -234,7 +234,7 @@ jobs:
234234
${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
235235
${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
236236
- name: Restore Maven/Gradle Dependency/Dist Caches
237-
uses: actions/cache/restore@v4
237+
uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
238238
# if it's a pull request, we restore the cache, but we don't save it
239239
if: github.event_name == 'pull_request'
240240
with:
@@ -250,13 +250,13 @@ jobs:
250250
251251
- name: Set up latest JDK ${{ matrix.java.name }} from jdk.java.net
252252
if: matrix.java.from == 'jdk.java.net'
253-
uses: oracle-actions/setup-java@v1
253+
uses: oracle-actions/setup-java@2e744f723b003fdd759727d0ff654c8717024845 # v1.4.0
254254
with:
255255
website: jdk.java.net
256256
release: ${{ matrix.java.java_version_numeric }}
257257
- name: Set up latest JDK ${{ matrix.java.name }} from Adoptium
258258
if: matrix.java.from == '' || matrix.java.from == 'adoptium.net'
259-
uses: actions/setup-java@v2.2.0
259+
uses: actions/setup-java@v3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
260260
with:
261261
distribution: 'temurin'
262262
java-version: ${{ matrix.java.java_version_numeric }}
@@ -266,14 +266,14 @@ jobs:
266266
run: echo "::set-output name=path::${JAVA_HOME}"
267267
- name: Set up JDK 11
268268
if: ${{ startsWith( inputs.branch, 'wip/2' ) }}
269-
uses: actions/setup-java@v2.2.0
269+
uses: actions/setup-java@v3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
270270
with:
271271
distribution: 'temurin'
272272
java-version: 11
273273
check-latest: true
274274
- name: Set up JDK 17
275275
if: ${{ !startsWith( inputs.branch, 'wip/2' ) }}
276-
uses: actions/setup-java@v2.2.0
276+
uses: actions/setup-java@v3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
277277
with:
278278
distribution: 'temurin'
279279
java-version: 17
@@ -292,7 +292,7 @@ jobs:
292292
-Porg.gradle.java.installations.paths=${{ steps.mainjdk-exportpath.outputs.path }},${{ steps.testjdk-exportpath.outputs.path }} \
293293
${{ matrix.java.jvm_args && '-Ptest.jdk.launcher.args=' }}${{ matrix.java.jvm_args }}
294294
- name: Upload reports (if build failed)
295-
uses: actions/upload-artifact@v4
295+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
296296
if: failure()
297297
with:
298298
name: reports-java${{ matrix.java.name }}

‎.github/workflows/codeql.yml

+5-5
Original file line numberDiff line numberDiff line change
@@ -24,24 +24,24 @@ jobs:
2424

2525
steps:
2626
- name: Checkout
27-
uses: actions/checkout@v3
27+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2828

2929
- name: Setup Java
30-
uses: actions/setup-java@v3
30+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
3131
with:
3232
distribution: temurin
3333
java-version: 17
3434

3535
- name: Initialize CodeQL
36-
uses: github/codeql-action/init@v2
36+
uses: github/codeql-action/init@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a # v3.28.4
3737
with:
3838
languages: ${{ matrix.language }}
3939
queries: +security-and-quality
4040

4141
- name: Autobuild
42-
uses: github/codeql-action/autobuild@v2
42+
uses: github/codeql-action/autobuild@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a # v3.28.4
4343

4444
- name: Perform CodeQL Analysis
45-
uses: github/codeql-action/analyze@v2
45+
uses: github/codeql-action/analyze@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a # v3.28.4
4646
with:
4747
category: "/language:${{ matrix.language }}"

0 commit comments

Comments
 (0)