Skip to content

Pin GitHub Actions to SHA hashes#308

Merged
bgrozev merged 1 commit intomasterfrom
pin-action-versions
Apr 16, 2026
Merged

Pin GitHub Actions to SHA hashes#308
bgrozev merged 1 commit intomasterfrom
pin-action-versions

Conversation

@bgrozev
Copy link
Copy Markdown
Member

@bgrozev bgrozev commented Apr 16, 2026

Pin all GitHub Actions version tags to their corresponding commit SHA hashes for improved supply-chain security.

Original version tags are preserved as comments (e.g. # v4).

- maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9
- maven.yml: codecov/codecov-action@v4 -> b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
- maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9
- maven.yml: rickstaa/action-create-tag@v1.7.2 -> a1c7777fcb2fee4f19b0f283ba888afa11678b72
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 16, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 35.88%. Comparing base (13e2486) to head (0b013c0).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##             master     #308      +/-   ##
============================================
- Coverage     35.93%   35.88%   -0.05%     
+ Complexity     1133     1126       -7     
============================================
  Files           166      166              
  Lines         10993    10993              
  Branches       1627     1627              
============================================
- Hits           3950     3945       -5     
+ Misses         6521     6517       -4     
- Partials        522      531       +9     

see 8 files with indirect coverage changes


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 13e2486...0b013c0. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@bgrozev bgrozev merged commit 8e0db06 into master Apr 16, 2026
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants