From 2cc097c6fcbc66a05c6cd3445bbdbcb21c17b08d Mon Sep 17 00:00:00 2001 From: Mark Siebert Date: Thu, 9 Apr 2026 14:29:28 -0700 Subject: [PATCH] fix: Pin GitHub Actions to full commit SHAs in release workflow Org policy requires all actions to be pinned to full-length commit SHAs. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 027b47b..185ad0c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,16 +19,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up JDK 8 - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: java-version: '8' distribution: 'temurin' - name: Cache Maven dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ~/.m2/repository key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} @@ -110,7 +110,7 @@ jobs: - name: Create GitHub Release if: startsWith(github.ref, 'refs/tags/') - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: |