This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git
The following commit(s) were added to refs/heads/master by this push:
new 4f9675922 [StepSecurity] ci: Harden GitHub Actions (#135)
4f9675922 is described below
commit 4f9675922d81c083657bb8a130737477eda559df
Author: StepSecurity Bot <b...@stepsecurity.io>
AuthorDate: Wed Mar 29 03:57:56 2023 -0700
[StepSecurity] ci: Harden GitHub Actions (#135)
Signed-off-by: StepSecurity Bot <b...@stepsecurity.io>
---
.github/workflows/pull-request-build.yaml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/pull-request-build.yaml
b/.github/workflows/pull-request-build.yaml
index 3303a4389..a2fe695ca 100644
--- a/.github/workflows/pull-request-build.yaml
+++ b/.github/workflows/pull-request-build.yaml
@@ -15,9 +15,9 @@ jobs:
pull-requests: read
timeout-minutes: 130
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 #
v3.5.0
- name: Set up JDK 11
- uses: actions/setup-java@v3
+ uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 #
v3.11.0
with:
java-version: '11'
distribution: 'temurin'
