diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7e90bc86ae31ecbbf9ab807368dcd514b206da80..4f27408937ff93d1ffb966dd2c6cafb63c517f72 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -58,7 +58,7 @@ jobs: SKIP_JAVA_TESTS: ${{ matrix.node-version != 14 || (github.event_name == 'pull_request' && !contains(github.event.pull_request.labels.*.name, 'ci:fulltest')) }} steps: - - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 with: fetch-depth: 2 @@ -113,7 +113,7 @@ jobs: timeout-minutes: 15 steps: - - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 with: fetch-depth: 2 @@ -163,7 +163,7 @@ jobs: steps: # full checkout for semantic-release - - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d01a2f962fcd97e7937a7247293086edc9b21077..d410ca5c4c00524a6e40888147a22c05b47ccc5c 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Delete fixtures to suppress false positives run: | diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 1724b9be2d030847e5d72147a49b09f64be25d08..14e00037903ca547a83e2d67236dd10455de6c15 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: 'Dependency Review' uses: actions/dependency-review-action@3f943b86c9a289f4e632c632695e2e0898d9d67d # tag=v1 diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml index e6c423c7e3a1897146ae48f088d69fb150faadb9..4e27c7c90f7a040fd157ce6b4ac826bb4f0e82d3 100644 --- a/.github/workflows/release-npm.yml +++ b/.github/workflows/release-npm.yml @@ -35,7 +35,7 @@ jobs: echo "NPM_TAG=${{ github.event.inputs.tag }}" >> $GITHUB_ENV fi - - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 with: ref: ${{ env.GIT_SHA }} diff --git a/.github/workflows/ws_scan.yaml b/.github/workflows/ws_scan.yaml index ec2abd87981100bcb7b6d8e91e050e59bc8be143..0b592c3929c0fa3b0f87d63922848bec7b824c60 100644 --- a/.github/workflows/ws_scan.yaml +++ b/.github/workflows/ws_scan.yaml @@ -8,7 +8,7 @@ jobs: WS_SCAN: runs-on: ubuntu-latest steps: - - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1 + - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Download UA run: curl -LJO https://github.com/whitesource/unified-agent-distribution/releases/latest/download/wss-unified-agent.jar