commit 07e69e5b3ccff7db5e199885d38fa52ced7b2170
author Step Security Bot <bot@stepsecurity.io> Wed Sep 14 00:49:49 2022 -0700
committer GitHub <noreply@github.com> Wed Sep 14 09:49:49 2022 +0200
tree e347f5431b09d75f57f8ac084e53c7e7f7c685f5
parent b32e6e195a2c0708d95aa6067b8f12fe21e0c55f

[StepSecurity] ci: Harden GitHub Actions (#781)

* [StepSecurity] ci: Harden GitHub Actions in scorecards-analysis.yml

* [StepSecurity] ci: Harden GitHub Actions in test.yml

* [StepSecurity] ci: Harden GitHub Actions in build.yml

* [StepSecurity] ci: Harden GitHub Actions in mirror.yml

* [StepSecurity] ci: Harden GitHub Actions in release_deploy_play_store.yml

* [StepSecurity] ci: Harden GitHub Actions in release_deploy_web.yml

* [StepSecurity] ci: Harden GitHub Actions in release_draft_github_release.yml

.github/workflows/build.yml

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 39ad664..81ba0ab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,7 +18,7 @@
         target: ["apk --debug", "appbundle --debug", "ios --no-codesign", macos, web]
     steps:
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@d854b6da19cdadd9a010605529e522c2393ebd38
         with:
           java-version: 11
           distribution: temurin

.github/workflows/release_draft_github_release.yml

diff --git a/.github/workflows/release_draft_github_release.yml b/.github/workflows/release_draft_github_release.yml
index bdf0635..39cb16e 100644
--- a/.github/workflows/release_draft_github_release.yml
+++ b/.github/workflows/release_draft_github_release.yml
@@ -78,7 +78,7 @@
           sudo apt-get install -y libgtk-3-dev libx11-dev pkg-config cmake ninja-build libblkid-dev
       - name: Install Android dependencies
         if: matrix.target == 'Android'
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@d854b6da19cdadd9a010605529e522c2393ebd38
         with:
           java-version: "12.x"
           distribution: temurin