Pin actions/checkout github action to a hash instead of a version for increased security (#1179)

pull/1187/head
Drew Roen 3 years ago committed by GitHub
parent ac373e7604
commit 1630b08455
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -41,7 +41,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: github.repository == 'flutter/samples' if: github.repository == 'flutter/samples'
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@d171c3b028d844f2bf14e9fdec0c58114451e4bf
- uses: actions/setup-java@4fe61d24fe5472910b93bdeffb8aad49f979d862 - uses: actions/setup-java@4fe61d24fe5472910b93bdeffb8aad49f979d862
with: with:
distribution: 'zulu' distribution: 'zulu'
@ -56,7 +56,7 @@ jobs:
runs-on: macos-latest runs-on: macos-latest
if: github.repository == 'flutter/samples' if: github.repository == 'flutter/samples'
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@d171c3b028d844f2bf14e9fdec0c58114451e4bf
- uses: actions/setup-java@4fe61d24fe5472910b93bdeffb8aad49f979d862 - uses: actions/setup-java@4fe61d24fe5472910b93bdeffb8aad49f979d862
with: with:
distribution: 'zulu' distribution: 'zulu'

@ -16,7 +16,7 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v2 uses: actions/checkout@d171c3b028d844f2bf14e9fdec0c58114451e4bf
with: with:
submodules: true submodules: true
fetch-depth: 0 fetch-depth: 0

@ -10,7 +10,7 @@ jobs:
if: github.repository == 'flutter/samples' if: github.repository == 'flutter/samples'
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v2 uses: actions/checkout@d171c3b028d844f2bf14e9fdec0c58114451e4bf
with: with:
submodules: true submodules: true
fetch-depth: 0 fetch-depth: 0

Loading…
Cancel
Save