Skip to content

Commit 63d4dcb

Browse files
committed
Use SHA Hashes
This commit updates workflows to use SHA hashes to reference other actions and workflows Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
1 parent 8c9e660 commit 63d4dcb

4 files changed

Lines changed: 8 additions & 8 deletions

File tree

.github/workflows/auto-merge-dependabot.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,6 @@ run-name: Merge Dependabot PR ${{ github.ref_name }}
1212
jobs:
1313
merge-dependabot-pr:
1414
permissions: write-all
15-
uses: spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml@v7
15+
uses: spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml@0d3f15bb384839966a1ff5c4383731a2b747f24b # v7
1616
with:
1717
mergeArguments: --auto --rebase

.github/workflows/codeql.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,4 +14,4 @@ jobs:
1414
actions: read
1515
contents: read
1616
security-events: write
17-
uses: spring-io/github-actions/.github/workflows/codeql-analysis.yml@1
17+
uses: spring-io/github-actions/.github/workflows/codeql-analysis.yml@e415dadd0910c901e7a7fabd67bbb355b2324500 # 1

.github/workflows/defer-issues.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,21 +18,21 @@ jobs:
1818
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1919
- name: Compute Version
2020
id: compute-version
21-
uses: spring-io/spring-release-actions/compute-version@0.0.4
21+
uses: spring-io/spring-release-actions/compute-version@2420148725bebe44bd59a575a9b1961ca4459b0b # 0.0.4
2222
- name: Get Today's Release Version
2323
id: todays-release
24-
uses: spring-io/spring-release-actions/get-todays-release-version@0.0.4
24+
uses: spring-io/spring-release-actions/get-todays-release-version@2420148725bebe44bd59a575a9b1961ca4459b0b # 0.0.4
2525
with:
2626
snapshot-version: ${{ steps.compute-version.outputs.version }}
2727
milestone-repository: ${{ github.repository }}
2828
milestone-token: ${{ secrets.GITHUB_TOKEN }}
2929
- name: Compute Next Version
3030
id: next-version
31-
uses: spring-io/spring-release-actions/compute-next-version@0.0.4
31+
uses: spring-io/spring-release-actions/compute-next-version@2420148725bebe44bd59a575a9b1961ca4459b0b # 0.0.4
3232
with:
3333
version: ${{ steps.todays-release.outputs.release-version }}
3434
- name: Schedule Next Milestone
35-
uses: spring-io/spring-release-actions/schedule-milestone@0.0.4
35+
uses: spring-io/spring-release-actions/schedule-milestone@2420148725bebe44bd59a575a9b1961ca4459b0b # 0.0.4
3636
with:
3737
version: ${{ steps.next-version.outputs.version }}
3838
version-date: ${{ steps.next-version.outputs.version-date }}

.github/workflows/update-antora-ui-spring.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
matrix:
2020
branch: [ '6.5.x', '7.0.x', 'main' ]
2121
steps:
22-
- uses: spring-io/spring-doc-actions/update-antora-spring-ui@415e2b11a766ba64799fffb5c97a4f7e17f677cf
22+
- uses: spring-io/spring-doc-actions/update-antora-spring-ui@415e2b11a766ba64799fffb5c97a4f7e17f677cf # v0.0.22
2323
name: Update
2424
with:
2525
docs-branch: ${{ matrix.branch }}
@@ -30,7 +30,7 @@ jobs:
3030
if: ${{ github.repository == 'spring-projects/spring-security' }}
3131
runs-on: ubuntu-latest
3232
steps:
33-
- uses: spring-io/spring-doc-actions/update-antora-spring-ui@415e2b11a766ba64799fffb5c97a4f7e17f677cf
33+
- uses: spring-io/spring-doc-actions/update-antora-spring-ui@415e2b11a766ba64799fffb5c97a4f7e17f677cf # v0.0.22
3434
name: Update
3535
with:
3636
docs-branch: 'docs-build'

0 commit comments

Comments
 (0)