[cxf] branch main updated: [StepSecurity] ci: Harden GitHub Actions (#1414)

[coheigea]

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/main by this push:
     new 3a5bf6699e [StepSecurity] ci: Harden GitHub Actions (#1414)
3a5bf6699e is described below

commit 3a5bf6699e32c4831f3a952535190df3da6fe1fa
Author: StepSecurity Bot <b...@stepsecurity.io>
AuthorDate: Fri Sep 1 00:07:25 2023 -0700

    [StepSecurity] ci: Harden GitHub Actions (#1414)
    
    Signed-off-by: StepSecurity Bot <b...@stepsecurity.io>
---
 .github/workflows/pull-request-build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pull-request-build.yml 
b/.github/workflows/pull-request-build.yml
index aeff0daacd..4fca4a99c9 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -15,9 +15,9 @@ jobs:
       pull-requests: read
     timeout-minutes: 130
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # 
v3.6.0
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # 
v3.12.0
         with:
           java-version: '17'
           distribution: 'temurin'