This is an automated email from the ASF dual-hosted git repository. sjaranowski pushed a commit to branch gh-action-updates in repository https://gitbox.apache.org/repos/asf/maven-integration-testing.git
commit f12a06d3bfe3e40f1ab0a90f78667838e8caf69c Author: Slawomir Jaranowski <[email protected]> AuthorDate: Sat Nov 12 17:38:44 2022 +0100 Update actions in GH build Old actions use deprecated node 12 - checkout v2 -> v3 - setup-java v2 -> v3 - disable access to GITHUB_TOKEN - don't store credentials with checkout --- .github/workflows/maven-verify.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml index 4548530a6..36c06d3c8 100644 --- a/.github/workflows/maven-verify.yml +++ b/.github/workflows/maven-verify.yml @@ -19,6 +19,9 @@ name: Java CI on: [push, pull_request] +# clare all permissions for GITHUB_TOKEN +permissions: {} + jobs: build: strategy: @@ -30,10 +33,12 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 + with: + persist-credentials: false - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@v3 with: java-version: ${{ matrix.java }} distribution: 'temurin'
