Skip to content

Commit 09737da

Browse files
micronaut-buildmicronaut-build
committed
Update common files
1 parent 390dee6 commit 09737da

8 files changed

Lines changed: 82 additions & 66 deletions

File tree

‎.github/renovate.json‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,16 @@
2323
"/actions.*/"
2424
]
2525
},
26+
{
27+
"matchDatasources": [
28+
"maven"
29+
],
30+
"matchManagers": [
31+
"maven",
32+
"gradle"
33+
],
34+
"allowedVersions": "!/.+-SNAPSHOT$/"
35+
},
2636
{
2737
"matchUpdateTypes": [
2838
"patch"

‎.github/workflows/central-sync.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,12 @@ jobs:
2020
unset JAVA_HOME
2121
export PATH=$(echo "$PATH" | tr ':' '\n' | grep -v '/usr/lib/jvm' | paste -sd:)
2222
- name: Checkout repository
23-
uses: actions/checkout@v6
23+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2424
with:
2525
ref: v${{ github.event.inputs.release_version }}
26-
- uses: gradle/actions/wrapper-validation@v6
26+
- uses: gradle/actions/wrapper-validation@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6
2727
- name: Set up JDK
28-
uses: actions/setup-java@v5
28+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
2929
with:
3030
distribution: 'temurin'
3131
java-version: |

‎.github/workflows/graalvm-dev.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,9 @@ jobs:
1818
outputs:
1919
matrix: ${{ steps.build-matrix.outputs.matrix }}
2020
steps:
21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2222
- name: Build Matrix
23-
uses: micronaut-projects/github-actions/graalvm/build-matrix@master
23+
uses: micronaut-projects/github-actions/graalvm/build-matrix@300bf6db7c062dcba77c90bb90e475df31b2acab # master
2424
id: build-matrix
2525
build:
2626
needs: build_matrix
@@ -47,16 +47,16 @@ jobs:
4747
sudo rm -rf /usr/lib/jvm/*
4848
unset JAVA_HOME
4949
export PATH=$(echo "$PATH" | tr ':' '\n' | grep -v '/usr/lib/jvm' | paste -sd:)
50-
- uses: actions/checkout@v6
50+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5151
- name: Pre-Build Steps
52-
uses: micronaut-projects/github-actions/graalvm/pre-build@master
52+
uses: micronaut-projects/github-actions/graalvm/pre-build@300bf6db7c062dcba77c90bb90e475df31b2acab # master
5353
id: pre-build
5454
with:
5555
java: ${{ matrix.java }}
5656
distribution: ${{ matrix.distribution }}
5757
nativeTestTask: ${{ matrix.native_test_task }}
5858
- name: Build Steps
59-
uses: micronaut-projects/github-actions/graalvm/build@master
59+
uses: micronaut-projects/github-actions/graalvm/build@300bf6db7c062dcba77c90bb90e475df31b2acab # master
6060
id: build
6161
env:
6262
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ secrets.GH_TOKEN_PUBLIC_REPOS_READONLY }}
@@ -65,7 +65,7 @@ jobs:
6565
with:
6666
nativeTestTask: ${{ matrix.native_test_task }}
6767
- name: Post-Build Steps
68-
uses: micronaut-projects/github-actions/graalvm/post-build@master
68+
uses: micronaut-projects/github-actions/graalvm/post-build@300bf6db7c062dcba77c90bb90e475df31b2acab # master
6969
id: post-build
7070
with:
7171
java: ${{ matrix.java }}

‎.github/workflows/graalvm-latest.yml‎

Lines changed: 16 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -13,20 +13,22 @@ on:
1313
branches:
1414
- master
1515
- '[0-9]+.[0-9]+.x'
16+
env:
17+
ALLOW_SECRETS: ${{ github.event.pull_request == null && 'true' || '' }}
1618
jobs:
1719
build_matrix:
1820
if: github.repository != 'micronaut-projects/micronaut-project-template'
1921
runs-on: ubuntu-latest
2022
env:
21-
DEVELOCITY_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
22-
DEVELOCITY_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USERNAME }}
23-
DEVELOCITY_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
23+
DEVELOCITY_ACCESS_KEY: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_ACCESS_KEY || '' }}
24+
DEVELOCITY_CACHE_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_USERNAME || '' }}
25+
DEVELOCITY_CACHE_PASSWORD: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD || '' }}
2426
outputs:
2527
matrix: ${{ steps.build-matrix.outputs.matrix }}
2628
steps:
27-
- uses: actions/checkout@v6
29+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2830
- name: Build Matrix
29-
uses: micronaut-projects/github-actions/graalvm/build-matrix@master
31+
uses: micronaut-projects/github-actions/graalvm/build-matrix@300bf6db7c062dcba77c90bb90e475df31b2acab # master
3032
id: build-matrix
3133
with:
3234
java-version: '25'
@@ -40,35 +42,35 @@ jobs:
4042
java: ['25']
4143
native_test_task: ${{ fromJson(needs.build_matrix.outputs.matrix).native_test_task }}
4244
env:
43-
DEVELOCITY_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
44-
DEVELOCITY_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USERNAME }}
45-
DEVELOCITY_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
45+
DEVELOCITY_ACCESS_KEY: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_ACCESS_KEY || '' }}
46+
DEVELOCITY_CACHE_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_USERNAME || '' }}
47+
DEVELOCITY_CACHE_PASSWORD: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD || '' }}
4648
steps:
4749
- name: Remove system JDKs
4850
run: |
4951
sudo rm -rf /usr/lib/jvm/*
5052
unset JAVA_HOME
5153
export PATH=$(echo "$PATH" | tr ':' '\n' | grep -v '/usr/lib/jvm' | paste -sd:)
52-
- uses: actions/checkout@v6
54+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5355
- name: Pre-Build Steps
54-
uses: micronaut-projects/github-actions/graalvm/pre-build@master
56+
uses: micronaut-projects/github-actions/graalvm/pre-build@300bf6db7c062dcba77c90bb90e475df31b2acab # master
5557
id: pre-build
5658
with:
5759
distribution: 'graalvm'
5860
gradle-java: '25'
5961
java: ${{ matrix.java }}
6062
nativeTestTask: ${{ matrix.native_test_task }}
6163
- name: Build Steps
62-
uses: micronaut-projects/github-actions/graalvm/build@master
64+
uses: micronaut-projects/github-actions/graalvm/build@300bf6db7c062dcba77c90bb90e475df31b2acab # master
6365
id: build
6466
env:
65-
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ secrets.GH_TOKEN_PUBLIC_REPOS_READONLY }}
66-
GH_USERNAME: ${{ secrets.GH_USERNAME }}
67+
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ env.ALLOW_SECRETS && secrets.GH_TOKEN_PUBLIC_REPOS_READONLY || '' }}
68+
GH_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GH_USERNAME || '' }}
6769
GRAALVM_QUICK_BUILD: true
6870
with:
6971
nativeTestTask: ${{ matrix.native_test_task }}
7072
- name: Post-Build Steps
71-
uses: micronaut-projects/github-actions/graalvm/post-build@master
73+
uses: micronaut-projects/github-actions/graalvm/post-build@300bf6db7c062dcba77c90bb90e475df31b2acab # master
7274
id: post-build
7375
with:
7476
java: ${{ matrix.java }}

‎.github/workflows/gradle.yml‎

Lines changed: 20 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,9 @@ on:
1313
branches:
1414
- master
1515
- '[0-9]+.[0-9]+.x'
16+
env:
17+
ALLOW_SECRETS: ${{ github.event.pull_request == null && 'true' || '' }}
18+
PREDICTIVE_TEST_SELECTION: "${{ github.event.pull_request != null && 'true' || 'false' }}"
1619
jobs:
1720
build:
1821
if: github.repository != 'micronaut-projects/micronaut-project-template'
@@ -21,17 +24,16 @@ jobs:
2124
matrix:
2225
java: ['25']
2326
env:
24-
DEVELOCITY_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
25-
DEVELOCITY_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USERNAME }}
26-
DEVELOCITY_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
27-
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ secrets.GH_TOKEN_PUBLIC_REPOS_READONLY }}
28-
GH_USERNAME: ${{ secrets.GH_USERNAME }}
27+
DEVELOCITY_ACCESS_KEY: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_ACCESS_KEY || '' }}
28+
DEVELOCITY_CACHE_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_USERNAME || '' }}
29+
DEVELOCITY_CACHE_PASSWORD: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD || '' }}
30+
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ env.ALLOW_SECRETS && secrets.GH_TOKEN_PUBLIC_REPOS_READONLY || '' }}
31+
GH_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GH_USERNAME || '' }}
2932
TESTCONTAINERS_RYUK_DISABLED: true
30-
PREDICTIVE_TEST_SELECTION: "${{ github.event_name == 'pull_request' && 'true' || 'false' }}"
31-
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
32-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
33-
OSS_INDEX_USERNAME: ${{ secrets.OSS_INDEX_USERNAME }}
34-
OSS_INDEX_PASSWORD: ${{ secrets.OSS_INDEX_PASSWORD }}
33+
SONAR_TOKEN: ${{ env.ALLOW_SECRETS && secrets.SONAR_TOKEN || '' }}
34+
GITHUB_TOKEN: ${{ env.ALLOW_SECRETS && github.token || '' }}
35+
OSS_INDEX_USERNAME: ${{ env.ALLOW_SECRETS && secrets.OSS_INDEX_USERNAME || '' }}
36+
OSS_INDEX_PASSWORD: ${{ env.ALLOW_SECRETS && secrets.OSS_INDEX_PASSWORD || '' }}
3537
steps:
3638
# https://github.com/actions/virtual-environments/issues/709
3739
- name: Remove system JDKs
@@ -50,19 +52,19 @@ jobs:
5052
df -h
5153
5254
- name: "📥 Checkout repository"
53-
uses: actions/checkout@v6
55+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5456
with:
5557
fetch-depth: 0
5658

5759
- name: "🔧 Setup GraalVM CE"
58-
uses: graalvm/setup-graalvm@v1
60+
uses: graalvm/setup-graalvm@2149f395d36ce12ad4ee5d7f334b26bf081fa555 # v1
5961
with:
6062
distribution: 'graalvm'
6163
java-version: ${{ matrix.java }}
62-
github-token: ${{ secrets.GITHUB_TOKEN }}
64+
github-token: ${{ github.token }}
6365

6466
- name: "🔧 Setup Gradle"
65-
uses: gradle/actions/setup-gradle@v6
67+
uses: gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6
6668

6769
- name: "❓ Optional setup step"
6870
run: |
@@ -80,15 +82,15 @@ jobs:
8082
8183
- name: "📊 Publish Test Report"
8284
if: always()
83-
uses: mikepenz/action-junit-report@v6
85+
uses: mikepenz/action-junit-report@bccf2e31636835cf0874589931c4116687171386 # v6
8486
with:
8587
check_name: Java CI / Test Report (${{ matrix.java }})
8688
report_paths: '**/build/test-results/test/TEST-*.xml'
8789
check_retries: 'true'
8890

8991
- name: "📜 Upload binary compatibility check results"
9092
if: matrix.java == '25'
91-
uses: actions/upload-artifact@v7
93+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
9294
with:
9395
name: binary-compatibility-reports
9496
path: "**/build/reports/binary-compatibility-*.html"
@@ -101,7 +103,7 @@ jobs:
101103
run: ./gradlew publishToSonatype docs --no-daemon
102104

103105
- name: "❓ Determine docs target repository"
104-
uses: haya14busa/action-cond@v1
106+
uses: haya14busa/action-cond@94f77f7a80cd666cb3155084e428254fea4281fd # v1
105107
id: docs_target
106108
with:
107109
cond: ${{ github.repository == 'micronaut-projects/micronaut-core' }}
@@ -110,7 +112,7 @@ jobs:
110112

111113
- name: "📑 Publish to Github Pages"
112114
if: success() && github.event_name == 'push' && matrix.java == '25'
113-
uses: micronaut-projects/github-pages-deploy-action@master
115+
uses: micronaut-projects/github-pages-deploy-action@76d63aafbab7108d74e83be4e5b3b0501382e829 # master
114116
env:
115117
TARGET_REPOSITORY: ${{ steps.docs_target.outputs.value }}
116118
GH_TOKEN: ${{ secrets.GH_TOKEN }}

‎.github/workflows/publish-snapshot.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,15 +15,15 @@ jobs:
1515
sudo rm -rf /usr/lib/jvm/*
1616
unset JAVA_HOME
1717
export PATH=$(echo "$PATH" | tr ':' '\n' | grep -v '/usr/lib/jvm' | paste -sd:)
18-
- uses: actions/checkout@v6
19-
- uses: actions/cache@v5
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
19+
- uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
2020
with:
2121
path: ~/.gradle/caches
2222
key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
2323
restore-keys: |
2424
${{ runner.os }}-gradle-
2525
- name: Set up JDK
26-
uses: actions/setup-java@v5
26+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
2727
with:
2828
distribution: 'temurin'
2929
java-version: |

‎.github/workflows/release.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -19,12 +19,12 @@ jobs:
1919
unset JAVA_HOME
2020
export PATH=$(echo "$PATH" | tr ':' '\n' | grep -v '/usr/lib/jvm' | paste -sd:)
2121
- name: Checkout repository
22-
uses: actions/checkout@v6
22+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2323
with:
2424
token: ${{ secrets.GH_TOKEN }}
25-
- uses: gradle/actions/wrapper-validation@v6
25+
- uses: gradle/actions/wrapper-validation@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6
2626
- name: Set up JDK
27-
uses: actions/setup-java@v5
27+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
2828
with:
2929
distribution: 'temurin'
3030
java-version: |
@@ -33,7 +33,7 @@ jobs:
3333
id: release_version
3434
run: echo "release_version=${GITHUB_REF:11}" >> $GITHUB_OUTPUT
3535
- name: Run pre-release
36-
uses: micronaut-projects/github-actions/pre-release@master
36+
uses: micronaut-projects/github-actions/pre-release@300bf6db7c062dcba77c90bb90e475df31b2acab # master
3737
env:
3838
MICRONAUT_BUILD_EMAIL: ${{ secrets.MICRONAUT_BUILD_EMAIL }}
3939
with:
@@ -92,13 +92,13 @@ jobs:
9292
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ secrets.GH_TOKEN_PUBLIC_REPOS_READONLY }}
9393
GH_USERNAME: ${{ secrets.GH_USERNAME }}
9494
- name: Export Gradle Properties
95-
uses: micronaut-projects/github-actions/export-gradle-properties@master
95+
uses: micronaut-projects/github-actions/export-gradle-properties@300bf6db7c062dcba77c90bb90e475df31b2acab # master
9696
- name: LATEST_TAG
9797
run: |
9898
echo "LATEST_TAG=$(curl -s -L -H 'Accept: application/vnd.github+json' -H 'X-GitHub-Api-Version: 2022-11-28' https://api.github.com/repos/${{ github.repository }}/releases/latest | jq -r '.tag_name')" >> $GITHUB_ENV
9999
- name: Publish to Github Pages
100100
if: success()
101-
uses: micronaut-projects/github-pages-deploy-action@master
101+
uses: micronaut-projects/github-pages-deploy-action@76d63aafbab7108d74e83be4e5b3b0501382e829 # master
102102
env:
103103
BETA: ${{ !(github.event.release.tag_name == env.LATEST_TAG) || github.event.release.draft || github.event.release.prerelease || contains(steps.release_version.outputs.release_version, 'M') || contains(steps.release_version.outputs.release_version, 'RC') }}
104104
GH_TOKEN: ${{ secrets.GH_TOKEN }}
@@ -111,7 +111,7 @@ jobs:
111111
DEVELOCITY_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
112112
- name: Run post-release
113113
if: success()
114-
uses: micronaut-projects/github-actions/post-release@master
114+
uses: micronaut-projects/github-actions/post-release@300bf6db7c062dcba77c90bb90e475df31b2acab # master
115115
env:
116116
MICRONAUT_BUILD_EMAIL: ${{ secrets.MICRONAUT_BUILD_EMAIL }}
117117
with:
@@ -143,7 +143,7 @@ jobs:
143143
actions: read # To read the workflow path.
144144
id-token: write # To sign the provenance.
145145
contents: write # To add assets to a release.
146-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
146+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0
147147
with:
148148
base64-subjects: "${{ needs.provenance-subject.outputs.artifacts-sha256 }}"
149149
upload-assets: true # Upload to a new release.

‎.github/workflows/sonatype.yml‎

Lines changed: 16 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,9 @@ on:
1313
branches:
1414
- master
1515
- '[0-9]+.[0-9]+.x'
16+
env:
17+
ALLOW_SECRETS: ${{ github.event.pull_request == null && 'true' || '' }}
18+
PREDICTIVE_TEST_SELECTION: "${{ github.event.pull_request != null && 'true' || 'false' }}"
1619
jobs:
1720
build:
1821
if: github.repository != 'micronaut-projects/micronaut-project-template'
@@ -21,17 +24,16 @@ jobs:
2124
matrix:
2225
java: ['25']
2326
env:
24-
DEVELOCITY_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
25-
DEVELOCITY_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USERNAME }}
26-
DEVELOCITY_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
27-
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ secrets.GH_TOKEN_PUBLIC_REPOS_READONLY }}
28-
GH_USERNAME: ${{ secrets.GH_USERNAME }}
27+
DEVELOCITY_ACCESS_KEY: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_ACCESS_KEY || '' }}
28+
DEVELOCITY_CACHE_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_USERNAME || '' }}
29+
DEVELOCITY_CACHE_PASSWORD: ${{ env.ALLOW_SECRETS && secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD || '' }}
30+
GH_TOKEN_PUBLIC_REPOS_READONLY: ${{ env.ALLOW_SECRETS && secrets.GH_TOKEN_PUBLIC_REPOS_READONLY || '' }}
31+
GH_USERNAME: ${{ env.ALLOW_SECRETS && secrets.GH_USERNAME || '' }}
2932
TESTCONTAINERS_RYUK_DISABLED: true
30-
PREDICTIVE_TEST_SELECTION: "${{ github.event_name == 'pull_request' && 'true' || 'false' }}"
31-
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
32-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
33-
OSS_INDEX_USERNAME: ${{ secrets.OSS_INDEX_USERNAME }}
34-
OSS_INDEX_PASSWORD: ${{ secrets.OSS_INDEX_PASSWORD }}
33+
SONAR_TOKEN: ${{ env.ALLOW_SECRETS && secrets.SONAR_TOKEN || '' }}
34+
GITHUB_TOKEN: ${{ env.ALLOW_SECRETS && github.token || '' }}
35+
OSS_INDEX_USERNAME: ${{ env.ALLOW_SECRETS && secrets.OSS_INDEX_USERNAME || '' }}
36+
OSS_INDEX_PASSWORD: ${{ env.ALLOW_SECRETS && secrets.OSS_INDEX_PASSWORD || '' }}
3537
steps:
3638
# https://github.com/actions/virtual-environments/issues/709
3739
- name: Remove system JDKs
@@ -50,19 +52,19 @@ jobs:
5052
df -h
5153
5254
- name: "📥 Checkout repository"
53-
uses: actions/checkout@v6
55+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5456
with:
5557
fetch-depth: 0
5658

5759
- name: "🔧 Setup GraalVM CE"
58-
uses: graalvm/setup-graalvm@v1
60+
uses: graalvm/setup-graalvm@2149f395d36ce12ad4ee5d7f334b26bf081fa555 # v1
5961
with:
6062
distribution: 'graalvm'
6163
java-version: ${{ matrix.java }}
62-
github-token: ${{ secrets.GITHUB_TOKEN }}
64+
github-token: ${{ github.token }}
6365

6466
- name: "🔧 Setup Gradle"
65-
uses: gradle/actions/setup-gradle@v6
67+
uses: gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6
6668

6769
- name: "❓ Optional setup step"
6870
run: |

0 commit comments

Comments
 (0)