Skip to content

Pin GitHub Actions to SHA hashes - #634

Merged
bgrozev merged 1 commit into
masterfrom
pin-action-versions
Apr 20, 2026
Merged

Pin GitHub Actions to SHA hashes#634
bgrozev merged 1 commit into
masterfrom
pin-action-versions

Conversation

@bgrozev

@bgrozev bgrozev commented Apr 16, 2026

Copy link
Copy Markdown
Member

Pin all GitHub Actions version tags to their corresponding commit SHA hashes for improved supply-chain security.

Original version tags are preserved as comments (e.g. # v4).

- maven.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- maven.yml: actions/setup-java@v4 -> c1e323688fd81a25caa38c78aa6df2d33d3e20d9
- maven.yml: codecov/codecov-action@v4 -> b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
@codecov

codecov Bot commented Apr 16, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 19.12%. Comparing base (e8245f6) to head (91ad849).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##             master     #634      +/-   ##
============================================
- Coverage     19.23%   19.12%   -0.12%     
+ Complexity      312      308       -4     
============================================
  Files            83       83              
  Lines          7204     7204              
  Branches        958      958              
============================================
- Hits           1386     1378       -8     
- Misses         5587     5595       +8     
  Partials        231      231              

see 3 files with indirect coverage changes


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e8245f6...91ad849. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@bgrozev
bgrozev merged commit b4174dc into master Apr 20, 2026
4 of 5 checks passed
@bgrozev
bgrozev deleted the pin-action-versions branch April 20, 2026 16:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants