This is an automated email from the ASF dual-hosted git repository.
davsclaus pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git
The following commit(s) were added to refs/heads/main by this push:
new caf7268cdba0 Pin GitHub actions (#25443)
caf7268cdba0 is described below
commit caf7268cdba0adb2e616a322af04d2ed0fa2e5a3
Author: Colm O hEigeartaigh <[email protected]>
AuthorDate: Tue Aug 11 12:20:45 2026 +0100
Pin GitHub actions (#25443)
---
.github/workflows/check-container-versions.yml | 6 +++---
.github/workflows/pr-commenter.yml | 6 +++---
.github/workflows/pr-id.yml | 2 +-
.github/workflows/pr-labeler.yml | 4 ++--
.github/workflows/pr-manual-component-test.yml | 2 +-
.github/workflows/security-scan.yml | 4 ++--
.github/workflows/sonar-scan.yml | 8 ++++----
7 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/.github/workflows/check-container-versions.yml
b/.github/workflows/check-container-versions.yml
index 48e904709ccb..4048e13509d1 100644
--- a/.github/workflows/check-container-versions.yml
+++ b/.github/workflows/check-container-versions.yml
@@ -43,12 +43,12 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/[email protected]
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
fetch-depth: 0
- name: Set up Python
- uses: actions/setup-python@v7
+ uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 #
v7.0.0
with:
python-version: '3.11'
@@ -371,7 +371,7 @@ jobs:
- name: Upload results artifact
if: always()
- uses: actions/[email protected]
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
with:
name: container-version-check-results
path: |
diff --git a/.github/workflows/pr-commenter.yml
b/.github/workflows/pr-commenter.yml
index b544407b6d6b..4e15ca2329fd 100644
--- a/.github/workflows/pr-commenter.yml
+++ b/.github/workflows/pr-commenter.yml
@@ -37,7 +37,7 @@ jobs:
github.event.workflow_run.conclusion == 'success'
steps:
- name: 'Download coverage artifact'
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
with:
script: |
var artifacts = await
github.rest.actions.listWorkflowRunArtifacts({
@@ -60,7 +60,7 @@ jobs:
- name: 'Extract PR id'
id: pr
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
@@ -69,7 +69,7 @@ jobs:
core.setOutput('id', issue_number)
- name: 'Comment on PR'
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
diff --git a/.github/workflows/pr-id.yml b/.github/workflows/pr-id.yml
index 847707c44592..7495b14634af 100644
--- a/.github/workflows/pr-id.yml
+++ b/.github/workflows/pr-id.yml
@@ -33,7 +33,7 @@ jobs:
github.repository == 'apache/camel'
steps:
- name: Checkout code
- uses: actions/[email protected]
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
submodules: recursive
diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml
index 41022c3c03a6..5d5756194d63 100644
--- a/.github/workflows/pr-labeler.yml
+++ b/.github/workflows/pr-labeler.yml
@@ -37,7 +37,7 @@ jobs:
github.event.workflow_run.conclusion == 'success'
steps:
- name: 'Download coverage artifact'
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
with:
script: |
var artifacts = await
github.rest.actions.listWorkflowRunArtifacts({
@@ -60,7 +60,7 @@ jobs:
- name: 'Extract PR id'
id: pr
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
diff --git a/.github/workflows/pr-manual-component-test.yml
b/.github/workflows/pr-manual-component-test.yml
index 6047bfc468b2..4686f9fa3d17 100644
--- a/.github/workflows/pr-manual-component-test.yml
+++ b/.github/workflows/pr-manual-component-test.yml
@@ -38,7 +38,7 @@ jobs:
sparse-checkout: components
sparse-checkout-cone-mode: true
- name: Check Permission
- uses:
actions-cool/check-user-permission@c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e
+ uses:
actions-cool/check-user-permission@c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e #
v2.4.0
- name: Retrieve PR sha and ref
id: pr
env:
diff --git a/.github/workflows/security-scan.yml
b/.github/workflows/security-scan.yml
index d0d6b33ec027..c934fa42a406 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -32,7 +32,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/[email protected]
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- name: Set up JDK 25
@@ -44,7 +44,7 @@ jobs:
- name: OWASP Dependency Check
run: ./mvnw -B -Pdependencycheck validate -DskipTests -DnvdApiKey=${{
secrets.NVD_API_KEY }} -DnvdApiDelay=5000 -l owasp-check.log
- name: Upload OWASP Report
- uses: actions/[email protected]
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
if: always()
with:
name: owasp-dependency-check-report
diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml
index 2b0a34d3a716..83f31fdd5eb8 100644
--- a/.github/workflows/sonar-scan.yml
+++ b/.github/workflows/sonar-scan.yml
@@ -57,7 +57,7 @@ jobs:
echo "target_artifact_id=$(sed '5q;d' pr-event.txt)" >> "$GITHUB_ENV"
- name: Create PR check
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
id: check
with:
script: |
@@ -104,7 +104,7 @@ jobs:
- name: Delete compiled classes artifact
if: always()
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
with:
script: |
await github.rest.actions.deleteArtifact({
@@ -124,7 +124,7 @@ jobs:
cache: 'maven'
- name: Cache SonarCloud packages
- uses: actions/cache@v6
+ uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with:
path: ~/.sonar/cache
key: ${{ runner.os }}-sonar
@@ -154,7 +154,7 @@ jobs:
SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
- name: Update PR check status
- uses: actions/github-script@v9
+ uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #
v9.0.0
if: always()
env:
CHECK_ID: ${{ steps.check.outputs.result }}
