This is an automated email from the ASF dual-hosted git repository. coheigea pushed a commit to branch coheigea/pin-actions in repository https://gitbox.apache.org/repos/asf/camel.git
commit 0aa15851f068fc36911192997f2032728e5e4989 Author: Colm O hEigeartaigh <[email protected]> AuthorDate: Tue Aug 11 10:20:49 2026 +0100 Pin GitHub actions --- .github/workflows/check-container-versions.yml | 6 +++--- .github/workflows/pr-commenter.yml | 6 +++--- .github/workflows/pr-id.yml | 2 +- .github/workflows/pr-labeler.yml | 4 ++-- .github/workflows/pr-manual-component-test.yml | 2 +- .github/workflows/security-scan.yml | 4 ++-- .github/workflows/sonar-scan.yml | 8 ++++---- 7 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/check-container-versions.yml b/.github/workflows/check-container-versions.yml index 48e904709ccb..4048e13509d1 100644 --- a/.github/workflows/check-container-versions.yml +++ b/.github/workflows/check-container-versions.yml @@ -43,12 +43,12 @@ jobs: steps: - name: Checkout repository - uses: actions/[email protected] + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.11' @@ -371,7 +371,7 @@ jobs: - name: Upload results artifact if: always() - uses: actions/[email protected] + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: container-version-check-results path: | diff --git a/.github/workflows/pr-commenter.yml b/.github/workflows/pr-commenter.yml index b544407b6d6b..4e15ca2329fd 100644 --- a/.github/workflows/pr-commenter.yml +++ b/.github/workflows/pr-commenter.yml @@ -37,7 +37,7 @@ jobs: github.event.workflow_run.conclusion == 'success' steps: - name: 'Download coverage artifact' - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | var artifacts = await github.rest.actions.listWorkflowRunArtifacts({ @@ -60,7 +60,7 @@ jobs: - name: 'Extract PR id' id: pr - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | @@ -69,7 +69,7 @@ jobs: core.setOutput('id', issue_number) - name: 'Comment on PR' - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/pr-id.yml b/.github/workflows/pr-id.yml index 847707c44592..7495b14634af 100644 --- a/.github/workflows/pr-id.yml +++ b/.github/workflows/pr-id.yml @@ -33,7 +33,7 @@ jobs: github.repository == 'apache/camel' steps: - name: Checkout code - uses: actions/[email protected] + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml index 41022c3c03a6..5d5756194d63 100644 --- a/.github/workflows/pr-labeler.yml +++ b/.github/workflows/pr-labeler.yml @@ -37,7 +37,7 @@ jobs: github.event.workflow_run.conclusion == 'success' steps: - name: 'Download coverage artifact' - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | var artifacts = await github.rest.actions.listWorkflowRunArtifacts({ @@ -60,7 +60,7 @@ jobs: - name: 'Extract PR id' id: pr - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/pr-manual-component-test.yml b/.github/workflows/pr-manual-component-test.yml index 6047bfc468b2..4686f9fa3d17 100644 --- a/.github/workflows/pr-manual-component-test.yml +++ b/.github/workflows/pr-manual-component-test.yml @@ -38,7 +38,7 @@ jobs: sparse-checkout: components sparse-checkout-cone-mode: true - name: Check Permission - uses: actions-cool/check-user-permission@c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e + uses: actions-cool/check-user-permission@c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e # v2.4.0 - name: Retrieve PR sha and ref id: pr env: diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index d0d6b33ec027..c934fa42a406 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/[email protected] + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Set up JDK 25 @@ -44,7 +44,7 @@ jobs: - name: OWASP Dependency Check run: ./mvnw -B -Pdependencycheck validate -DskipTests -DnvdApiKey=${{ secrets.NVD_API_KEY }} -DnvdApiDelay=5000 -l owasp-check.log - name: Upload OWASP Report - uses: actions/[email protected] + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: owasp-dependency-check-report diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml index 2b0a34d3a716..83f31fdd5eb8 100644 --- a/.github/workflows/sonar-scan.yml +++ b/.github/workflows/sonar-scan.yml @@ -57,7 +57,7 @@ jobs: echo "target_artifact_id=$(sed '5q;d' pr-event.txt)" >> "$GITHUB_ENV" - name: Create PR check - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 id: check with: script: | @@ -104,7 +104,7 @@ jobs: - name: Delete compiled classes artifact if: always() - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | await github.rest.actions.deleteArtifact({ @@ -124,7 +124,7 @@ jobs: cache: 'maven' - name: Cache SonarCloud packages - uses: actions/cache@v6 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.sonar/cache key: ${{ runner.os }}-sonar @@ -154,7 +154,7 @@ jobs: SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} - name: Update PR check status - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 if: always() env: CHECK_ID: ${{ steps.check.outputs.result }}
