Pin dependencies

grails · Sep 13, 2023 · c076bce · c076bce
1 parent dd39589
commit c076bce
Show file tree

Hide file tree

Showing 6 changed files with 17 additions and 17 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -36,11 +36,11 @@ jobs:
 
  steps:
  - name: Checkout repository
- uses: actions/checkout@v3
+ uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL
- uses: github/codeql-action/init@v2
+ uses: github/codeql-action/init@701f152f28d4350ad289a5e31435e9ab6169a7ca # v2
  with:
  languages: ${{ matrix.language }}
  # If you wish to specify custom queries, you can do so here or in a config file.
@@ -51,7 +51,7 @@ jobs:
  # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
  # If this step fails, then you should remove it and run the build manually (see below)
  - name: Autobuild
- uses: github/codeql-action/autobuild@v2
+ uses: github/codeql-action/autobuild@701f152f28d4350ad289a5e31435e9ab6169a7ca # v2
 
  # ℹ️ Command-line programs to run using the OS shell.
  # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -65,4 +65,4 @@ jobs:
  # make release
 
  - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v2
+ uses: github/codeql-action/analyze@701f152f28d4350ad289a5e31435e9ab6169a7ca # v2
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
@@ -29,9 +29,9 @@ jobs:
  WORKSPACE: ${{ github.workspace }}
  GRADLE_OPTS: -Xmx1500m -Dfile.encoding=UTF-8
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
  - name: Set up JDK
- uses: actions/setup-java@v3
+ uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3
  with:
  distribution: 'adopt'
  java-version: ${{ matrix.java }}
@@ -56,7 +56,7 @@ jobs:
  arguments: build groovydoc
  - name: Publish Test Report
  if: steps.build.outcome == 'failure' || steps.tests.outcome == 'failure'
- uses: scacap/action-surefire-report@v1
+ uses: scacap/action-surefire-report@6efd3d10b5c1996a0724dd4c4915a073f685fefa # v1
  with:
  github_token: ${{ secrets.GITHUB_TOKEN }}
  report_paths: '**/build/test-results/test/TEST-*.xml'

diff --git a/.github/workflows/groovy-joint-workflow.yml b/.github/workflows/groovy-joint-workflow.yml
@@ -38,9 +38,9 @@ jobs:
  java: [11.0.6]
  runs-on: ${{ matrix.os }}
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
  - name: Set up JDK
- uses: actions/setup-java@v3
+ uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3
  with:
  distribution: 'adopt'
  java-version: ${{ matrix.java }}

diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
@@ -16,7 +16,7 @@ jobs:
  release_notes:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
  - name: Check if it has release drafter config file
  id: check_release_drafter
  run: |
@@ -41,7 +41,7 @@ jobs:
  id: release_notes
  with:
  token: ${{ secrets.GH_TOKEN }}
- - uses: ncipollo/release-action@v1
+ - uses: ncipollo/release-action@6c75be85e571768fa31b40abf38de58ba0397db5 # v1
  if: steps.check_release_drafter.outputs.has_release_drafter == 'false' && steps.release_notes.outputs.generated_changelog == 'true'
  with:
  allowUpdates: true

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,12 +19,12 @@ jobs:
  GRADLE_OPTS: -Xmx1500m -Dfile.encoding=UTF-8
  steps:
  - name: Checkout repository
- uses: actions/checkout@v3
+ uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
  with:
  token: ${{ secrets.GH_TOKEN }}
- - uses: gradle/wrapper-validation-action@v1
+ - uses: gradle/wrapper-validation-action@56b90f209b02bf6d1deae490e9ef18b21a389cd4 # v1
  - name: Set up JDK
- uses: actions/setup-java@v3
+ uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3
  with:
  distribution: 'adopt'
  java-version: ${{ matrix.java }}

diff --git a/.github/workflows/retry-release.yml b/.github/workflows/retry-release.yml
@@ -25,13 +25,13 @@ jobs:
  GRADLE_OPTS: -Xmx1500m -Dfile.encoding=UTF-8
  steps:
  - name: Checkout repository
- uses: actions/checkout@v3
+ uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
  with:
  ref: "v${{ github.event.inputs.release }}"
  token: ${{ secrets.GH_TOKEN }}
- - uses: gradle/wrapper-validation-action@v1
+ - uses: gradle/wrapper-validation-action@56b90f209b02bf6d1deae490e9ef18b21a389cd4 # v1
  - name: Set up JDK
- uses: actions/setup-java@v3
+ uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3
  with:
  distribution: 'adopt'
  java-version: ${{ matrix.java }}