The GitHub Actions job "Code Analysis" on 
grails-core.git/feat/grails-jacoco-plugin has failed.
Run started by GitHub user jamesfredley (triggered by jamesfredley).

Head commit for run:
b0e6cf8486bdf82ad376cb89ca55c0a7c72ba1b2 / James Fredley 
<[email protected]>
fix(ci): pin Coverage workflow actions to ASF-approved SHAs

The jacoco coverage.yml workflow used floating action tags (checkout@v6,
setup-java@v4, [email protected], [email protected]) and an
outdated setup-gradle pin, which the ASF org policy rejects, causing the
Coverage workflow to fail at startup. Pin every action to the ASF-approved
commit SHAs used elsewhere in the repo (checkout v6.0.2, setup-java v5.2.0,
setup-gradle v6.1.0 with cache-provider: basic, upload-artifact v7.0.1,
download-artifact v8.0.1).

Assisted-by: claude-code:claude-4.8-opus

Report URL: https://github.com/apache/grails-core/actions/runs/26621141726

With regards,
GitHub Actions via GitBox

Reply via email to