fix openssf problems (#738)

* fix openssf Signed-off-by: minmingzhu <[email protected]> * Update hibench_ci_spark3.0_hadoop_3.2_part_1.yml --------- Signed-off-by: minmingzhu <[email protected]>
Intel-bigdata · Feb 7, 2024 · 48f714c · 48f714c
1 parent 03a9d63
commit 48f714c
Show file tree

Hide file tree

Showing 6 changed files with 37 additions and 19 deletions.
diff --git a/.github/workflows/hibench_ci_spark2.4_hadoop_2.7_part_1.yml b/.github/workflows/hibench_ci_spark2.4_hadoop_2.7_part_1.yml
@@ -2,18 +2,21 @@ name: HiBench CI SPARK_2.4_HADOOP_2.7
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde # v1.4.4
         with:
           java-version: 1.8
       - name: Restore cached dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
         with:
           path: |
             # /var/cache/apt/archives/*.deb

diff --git a/.github/workflows/hibench_ci_spark2.4_hadoop_2.7_part_2.yml b/.github/workflows/hibench_ci_spark2.4_hadoop_2.7_part_2.yml
@@ -2,18 +2,21 @@ name: HiBench CI SPARK_2.4_HADOOP_2.7
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde # v1.4.4
         with:
           java-version: 1.8
       - name: Restore cached dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
         with:
           path: |
             # /var/cache/apt/archives/*.deb

diff --git a/.github/workflows/hibench_ci_spark3.0_hadoop_3.2_part_1.yml b/.github/workflows/hibench_ci_spark3.0_hadoop_3.2_part_1.yml
@@ -2,18 +2,21 @@ name: HiBench CI SPARK_3.0_HADOOP_3.2
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde # v1.4.4
         with:
           java-version: 1.8
       - name: Restore cached dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
         with:
           path: |
             # /var/cache/apt/archives/*.deb

diff --git a/.github/workflows/hibench_ci_spark3.0_hadoop_3.2_part_2.yml b/.github/workflows/hibench_ci_spark3.0_hadoop_3.2_part_2.yml
@@ -2,18 +2,21 @@ name: HiBench CI SPARK_3.0_HADOOP_3.2
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde # v1.4.4
         with:
           java-version: 1.8
       - name: Restore cached dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
         with:
           path: |
             # /var/cache/apt/archives/*.deb

diff --git a/.github/workflows/hibench_ci_spark3.1_hadoop_3.2_part_1.yml b/.github/workflows/hibench_ci_spark3.1_hadoop_3.2_part_1.yml
@@ -2,18 +2,21 @@ name: HiBench CI SPARK_3.1_HADOOP_3.2
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde # v1.4.4
         with:
           java-version: 1.8
       - name: Restore cached dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
         with:
           path: |
             # /var/cache/apt/archives/*.deb

diff --git a/.github/workflows/hibench_ci_spark3.1_hadoop_3.2_part_2.yml b/.github/workflows/hibench_ci_spark3.1_hadoop_3.2_part_2.yml
@@ -2,18 +2,21 @@ name: HiBench CI SPARK_3.1_HADOOP_3.2
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-20.04
-
+    for publishing the docs to GH Pages
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde # v1.4.4
         with:
           java-version: 1.8
       - name: Restore cached dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
         with:
           path: |
             # /var/cache/apt/archives/*.deb