use commit hash instead of version tag for third-party actions, only …

…build on pull_request
medizininformatik-initiative · Mar 25, 2024 · f6c48ae · f6c48ae
1 parent 8c88cb5
commit f6c48ae
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml
@@ -1,6 +1,6 @@
 name: Java CI Build with Maven
 
-on: [push]
+on: [pull_request]
 
 jobs:
   build:
@@ -15,7 +15,7 @@ jobs:
           distribution: 'zulu'
           java-version: 17
           cache: 'maven'
-      - uses: s4u/maven-settings-action@v2.8.0
+      - uses: s4u/maven-settings-action@7802f6aec16c9098b4798ad1f1d8ac75198194bd #3.0.0
         with:
           servers: |
             [ {"id": "github-mii", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}"}]

diff --git a/.github/workflows/maven-publish.yml b/.github/workflows/maven-publish.yml
@@ -21,7 +21,7 @@ jobs:
           distribution: 'zulu'
           java-version: 17
           cache: 'maven'
-      - uses: s4u/maven-settings-action@v2.8.0
+      - uses: s4u/maven-settings-action@7802f6aec16c9098b4798ad1f1d8ac75198194bd #3.0.0
         with:
           servers: |
             [ {"id": "github-mii", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}"}]