05f1ed756b
## What - Pin all GitHub Actions to their specific SHA1 hashes to reduce supply chain attack risk - Replaces version tags with specific commit SHAs - Includes version comments for easier reference - Changes generated with the pinact tool See internal wiki page on supply chain security for further info ## How Used the tool pinact to pin the sha for github actions. ## Review guide <!-- 1. `x.py` 2. `y.py` --> ## User Impact No impact ## Can this PR be safely reverted and rolled back? - [x] YES 💚 - [ ] NO ❌
21 lines
704 B
YAML
21 lines
704 B
YAML
name: Gradle Dependency Analysis
|
|
on:
|
|
pull_request:
|
|
|
|
jobs:
|
|
dependencies-diff:
|
|
name: Gradle Dependency Diff
|
|
runs-on: ubuntu-latest
|
|
# As of now, the diff analysis does not work for forks.
|
|
if: github.event.pull_request.head.repo.fork == false
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
|
|
- name: Set up Java
|
|
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
|
|
with:
|
|
distribution: temurin
|
|
java-version: 21
|
|
- name: Run Gradle Dependency Diff
|
|
uses: be-hase/gradle-dependency-diff-action@c6832aa3ca2594b7f25136bad88155f483d1fa04 # v2.0.0
|