Update actions/checkout action to v4

finos · Sep 4, 2023 · 68f4bf9 · 68f4bf9
1 parent 30e1e0a
commit 68f4bf9
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 8 deletions.
diff --git a/.github/workflows/cve-scanning-docker.yml b/.github/workflows/cve-scanning-docker.yml
@@ -6,7 +6,7 @@ jobs:
   scan-docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: docker-practice/[email protected]
       - name: Build
         run: docker build -f Dockerfile -t user/app:latest .

diff --git a/.github/workflows/cve-scanning-dotnet.yml b/.github/workflows/cve-scanning-dotnet.yml
@@ -9,7 +9,7 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - name: Setup .NET
       uses: actions/setup-dotnet@v3
       with:

diff --git a/.github/workflows/cve-scanning-gradle.yml b/.github/workflows/cve-scanning-gradle.yml
@@ -6,7 +6,7 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Set up JDK 11
         uses: actions/setup-java@v3
         with:

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -31,7 +31,7 @@ jobs:
             package_upload_enabled: true
     steps:
     - name: Check out the code
-      uses: actions/checkout@v3
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0
     - name: Run Linux build
@@ -95,7 +95,7 @@ jobs:
             package_upload_enabled: true
     steps:
     - name: Check out the code
-      uses: actions/checkout@v3
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0
     - name: Run Linux build
@@ -145,7 +145,7 @@ jobs:
             name: MSVC 2022 x64
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0
     - name: Vcpkg Dependencies
@@ -177,7 +177,7 @@ jobs:
     timeout-minutes: 60
     continue-on-error: true
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0
     - name: MacOS Build

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -9,7 +9,7 @@ jobs:
     container:
       image: returntocorp/semgrep
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - run: semgrep scan --error --config auto
       env:
         SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}