This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git
The following commit(s) were added to refs/heads/master by this push:
new b975a6975 Fixup sha pinning
b975a6975 is described below
commit b975a69754835a21a9f717aeb60e1e5b364786e7
Author: Colm O hEigeartaigh <[email protected]>
AuthorDate: Mon Aug 10 16:47:21 2026 +0100
Fixup sha pinning
---
.github/workflows/codeql-analysis.yml | 8 ++++----
.github/workflows/scorecards.yml | 4 ++--
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index 595270be4..9fe07f723 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,7 +37,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
@@ -50,7 +50,7 @@ jobs:
java-version: '17'
- name: Cache local Maven repository
- uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0
+ uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with:
path: ~/.m2
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -58,7 +58,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3
#v1
+ uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3
# v4.37.6
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a
config file.
@@ -86,4 +86,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 #v1
+ uses:
github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 4ac33deec..2fc97c159 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -30,7 +30,7 @@ jobs:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc
#tag=2.4.4
+ uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc #
v2.4.4
with:
results_file: results.sarif
results_format: sarif
@@ -57,6 +57,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses:
github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3
#tag=v2
+ uses:
github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 #
v4.37.6
with:
sarif_file: results.sarif
