Pin gradle/gradle-build-action action to 982da8e [SECURITY]

grails · Dec 20, 2023 · 9a8fd6e · 9a8fd6e
1 parent bc94a99
commit 9a8fd6e
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 8 deletions.
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
@@ -28,7 +28,7 @@ jobs:
  java-version: ${{ matrix.java }}
  - name: Run Build
  id: build
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  env:
  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
  GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER: ${{ secrets.GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER }}
@@ -54,7 +54,7 @@ jobs:
  java-version: 11
  - name: Publish Artifacts (repo.grails.org)
  id: publish
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  env:
  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
  GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER: ${{ secrets.GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER }}

diff --git a/.github/workflows/groovy-joint-workflow.yml b/.github/workflows/groovy-joint-workflow.yml
@@ -106,7 +106,7 @@ jobs:
  # Add Gradle Enterprise set-up related configuration after line no 20 in settings.gradle
  echo "${{ steps.ge_conf.outputs.value}}" | sed -i -e "20r /dev/stdin" settings.gradle
  - name: Build and install groovy (no docs)
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  env:
  GRADLE_SCANS_ACCEPT: yes
  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
@@ -148,7 +148,7 @@ jobs:
  echo "CI_GROOVY_VERSION=${{needs.build_groovy.outputs.groovyVersion}}" >> $GITHUB_ENV
  - name: Build Grails
  id: build_grails
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  env:
  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
  GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER: ${{ secrets.GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER }}

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -42,7 +42,7 @@ jobs:
  - name: Run Assemble
  if: success()
  id: assemble
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  with:
  arguments: assemble
  env:
@@ -71,7 +71,7 @@ jobs:
  - name: Publish to Sonatype OSSRH
  id: publish
  if: success() && false
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  env:
  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
  GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER: ${{ secrets.GRADLE_ENTERPRISE_BUILD_CACHE_NODE_USER }}

diff --git a/.github/workflows/retry-release.yml b/.github/workflows/retry-release.yml
@@ -44,7 +44,7 @@ jobs:
  VERSION: ${{ github.event.inputs.release }}
  - name: Run Assemble
  id: assemble
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  with:
  arguments: assemble
  env:

diff --git a/.github/workflows/sdkman.yml b/.github/workflows/sdkman.yml
@@ -22,7 +22,7 @@ jobs:
  distribution: 'adopt'
  java-version: '8'
  - name: Grails SDK Minor Release
- uses: gradle/gradle-build-action@v2
+ uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2
  with:
  arguments: sdkMinorRelease
  env: