This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a commit to branch
OPENNLP-1754-Convert-GH-Action-Tags-into-Pinned-SHA-2.x
in repository https://gitbox.apache.org/repos/asf/opennlp.git
commit 6e399e70a618ed289eea8cfee822cff4363a3fcb
Author: Richard Zowalla <r...@apache.org>
AuthorDate: Tue Jun 24 11:21:13 2025 +0200
OPENNLP-1754 - Convert GH Action Tags into Pinned SHA
---
.github/workflows/license.yml | 8 ++++----
.github/workflows/maven.yml | 4 ++--
.github/workflows/publish-snapshots.yml | 6 +++---
.github/workflows/shell-tests.yml | 12 ++++++------
4 files changed, 15 insertions(+), 15 deletions(-)
diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml
index a2abf514..f50266ed 100644
--- a/.github/workflows/license.yml
+++ b/.github/workflows/license.yml
@@ -26,15 +26,15 @@ jobs:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #
v4.7.1
with:
java-version: '17'
distribution: 'temurin'
- name: Cache Maven packages
- uses: actions/cache@v4
+ uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: ~/.m2
key: ${{ runner.os }}-master-m2-${{ hashFiles('**/pom.xml') }}
@@ -53,7 +53,7 @@ jobs:
cat src/license/NOTICE.template target/DEPENDENCY-LICENSES > NOTICE
- name: Create Pull Request after License Regeneration
- uses: peter-evans/create-pull-request@v7
+ uses:
peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e #
v7.0.8
with:
base: main
token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index f46421dd..35866081 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -39,10 +39,10 @@ jobs:
experimental: true
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- - uses: actions/cache@v4
+ - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/publish-snapshots.yml
b/.github/workflows/publish-snapshots.yml
index 7678b233..44702200 100644
--- a/.github/workflows/publish-snapshots.yml
+++ b/.github/workflows/publish-snapshots.yml
@@ -30,18 +30,18 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
with:
persist-credentials: false
- name: Cache Maven Repository
- uses: actions/cache@v4
+ uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
restore-keys: |
${{ runner.os }}-maven-
- name: Setup Java
- uses: actions/setup-java@v4
+ uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #
v4.7.1
with:
distribution: adopt
java-version: 17
diff --git a/.github/workflows/shell-tests.yml
b/.github/workflows/shell-tests.yml
index 429c8c35..36e9c994 100644
--- a/.github/workflows/shell-tests.yml
+++ b/.github/workflows/shell-tests.yml
@@ -28,7 +28,7 @@ jobs:
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
# Note: bats-core/bats-action@3.0.0 is not allowed to be used (needs an
INFRA issue)
- name: Install Bats (Testing Framework)
@@ -37,7 +37,7 @@ jobs:
sudo apt-get install -y bats
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #
v4.7.1
with:
distribution: temurin
java-version: 17
@@ -84,7 +84,7 @@ jobs:
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
- name: Install Bats (Testing Framework)
run: |
@@ -92,7 +92,7 @@ jobs:
brew install bats-core
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #
v4.7.1
with:
distribution: temurin
java-version: 17
@@ -130,7 +130,7 @@ jobs:
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
- name: Install Pester
run: |
@@ -139,7 +139,7 @@ jobs:
shell: pwsh
- name: Set up JDK 17
- uses: actions/setup-java@v4
+ uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #
v4.7.1
with:
distribution: temurin
java-version: 17
