Skip to content

Commit fb1dc05

Browse files
Miqueasherjj22ee
Miqueasher
authored and
jj22ee
committed
Reverting previous revert for 3p actions update (#1198)
This pr reverts the previous revert for 3p action updates for non release files. By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
1 parent 22fdff3 commit fb1dc05

8 files changed

+102
-95
lines changed

‎.github/workflows/application-signals-e2e-test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,12 @@ jobs:
2626
runs-on: ubuntu-latest
2727
steps:
2828
- name: Configure AWS Credentials
29-
uses: aws-actions/configure-aws-credentials@v4
29+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
3030
with:
3131
role-to-assume: arn:aws:iam::${{ secrets.APPLICATION_SIGNALS_E2E_TEST_ACCOUNT_ID }}:role/${{ secrets.APPLICATION_SIGNALS_E2E_TEST_ROLE_NAME }}
3232
aws-region: us-east-1
3333

34-
- uses: actions/download-artifact@v5
34+
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 #5.0.0
3535
with:
3636
name: aws-opentelemetry-agent.jar
3737

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,11 @@ jobs:
2323

2424
steps:
2525
- name: Checkout repository
26-
uses: actions/checkout@v5
26+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #5.0.0
2727

2828
# Initializes the CodeQL tools for scanning.
2929
- name: Initialize CodeQL
30-
uses: github/codeql-action/init@v3
30+
uses: github/codeql-action/init@16df4fbc19aea13d921737861d6c622bf3cefe23 #v3.30.3
3131
with:
3232
languages: java
3333

@@ -37,7 +37,7 @@ jobs:
3737
distribution: temurin
3838

3939
- name: Cache local Maven repository
40-
uses: actions/cache@v3
40+
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 #v4.2.4
4141
with:
4242
path: |
4343
~/.m2/repository/io/opentelemetry/
@@ -52,10 +52,11 @@ jobs:
5252

5353
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
5454

55+
- name: Setup Gradle
56+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a #4.4.3
57+
5558
- name: Manually build to avoid autobuild failures
56-
uses: gradle/gradle-build-action@v3
57-
with:
58-
arguments: build
59+
run: ./gradlew build
5960

6061
- name: Perform CodeQL Analysis
61-
uses: github/codeql-action/analyze@v3
62+
uses: github/codeql-action/analyze@16df4fbc19aea13d921737861d6c622bf3cefe23 #v3.30.3

‎.github/workflows/daily-scan.yml‎

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
runs-on: ubuntu-latest
2525
steps:
2626
- name: Checkout repo for dependency scan
27-
uses: actions/checkout@v5
27+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #5.0.0
2828
with:
2929
fetch-depth: 0
3030

@@ -35,13 +35,13 @@ jobs:
3535
distribution: 'temurin'
3636

3737
- name: Configure AWS credentials for dependency scan
38-
uses: aws-actions/configure-aws-credentials@v4
38+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
3939
with:
4040
role-to-assume: ${{ secrets.SECRET_MANAGER_ROLE_ARN }}
4141
aws-region: ${{ env.AWS_DEFAULT_REGION }}
4242

4343
- name: Get NVD API key for dependency scan
44-
uses: aws-actions/aws-secretsmanager-get-secrets@v2
44+
uses: aws-actions/aws-secretsmanager-get-secrets@a9a7eb4e2f2871d30dc5b892576fde60a2ecc802 #v2.0.10
4545
id: nvd_api_key
4646
with:
4747
secret-ids: ${{ secrets.NVD_API_KEY_SECRET_ARN }}
@@ -50,10 +50,11 @@ jobs:
5050
- name: Publish patched dependencies to maven local
5151
uses: ./.github/actions/patch-dependencies
5252

53+
- name: Setup Gradle
54+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a #4.4.3
55+
5356
- name: Build JAR
54-
uses: gradle/gradle-build-action@v3
55-
with:
56-
arguments: assemble -PlocalDocker=true
57+
run: ./gradlew assemble -PlocalDocker=true
5758

5859
# See http://jeremylong.github.io/DependencyCheck/dependency-check-cli/ for installation explanation
5960
- name: Install and run dependency scan
@@ -77,13 +78,13 @@ jobs:
7778
run: less dependency-check-report.html
7879

7980
- name: Configure AWS credentials for image scan
80-
uses: aws-actions/configure-aws-credentials@v4
81+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
8182
with:
8283
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
8384
aws-region: ${{ env.AWS_DEFAULT_REGION }}
8485

8586
- name: Login to Public ECR
86-
uses: docker/login-action@v3
87+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
8788
with:
8889
registry: public.ecr.aws
8990

@@ -121,7 +122,7 @@ jobs:
121122

122123
- name: Configure AWS Credentials for emitting metrics
123124
if: always()
124-
uses: aws-actions/configure-aws-credentials@v4
125+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
125126
with:
126127
role-to-assume: ${{ secrets.METRICS_ROLE_ARN }}
127128
aws-region: ${{ env.AWS_DEFAULT_REGION }}

‎.github/workflows/docker-build-corretto-slim.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -19,24 +19,24 @@ jobs:
1919
build-corretto:
2020
runs-on: ubuntu-latest
2121
steps:
22-
- uses: actions/checkout@v5
22+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #5.0.0
2323
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
2424
- name: Configure AWS Credentials
25-
uses: aws-actions/configure-aws-credentials@v4
25+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
2626
with:
2727
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
2828
aws-region: ${{ env.AWS_DEFAULT_REGION }}
2929
- name: Log in to AWS ECR
30-
uses: docker/login-action@v3
30+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
3131
with:
3232
registry: public.ecr.aws
3333

3434
- name: Set up QEMU
35-
uses: docker/setup-qemu-action@v3
35+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #3.6.0
3636
- name: Set up Docker Buildx
37-
uses: docker/setup-buildx-action@v3
37+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 #v3.11.1
3838
- name: Build docker image
39-
uses: docker/build-push-action@v6
39+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 #6.18.0
4040
with:
4141
push: true
4242
context: scripts/docker/corretto-slim

‎.github/workflows/docker-build-smoke-tests-fake-backend.yml‎

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,14 +20,14 @@ jobs:
2020
build-docker:
2121
runs-on: ubuntu-latest
2222
steps:
23-
- uses: actions/checkout@v5
23+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #5.0.0
2424
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
2525
with:
2626
java-version: 17
2727
distribution: 'temurin'
2828
# cache local patch outputs
2929
- name: Cache local Maven repository
30-
uses: actions/cache@v3
30+
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 #v4.2.4
3131
with:
3232
path: |
3333
~/.m2/repository/io/opentelemetry/
@@ -40,16 +40,17 @@ jobs:
4040
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
4141
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
4242
- name: Configure AWS Credentials
43-
uses: aws-actions/configure-aws-credentials@v4
43+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
4444
with:
4545
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
4646
aws-region: ${{ env.AWS_DEFAULT_REGION }}
4747
- name: Log in to AWS ECR
48-
uses: docker/login-action@v3
48+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
4949
with:
5050
registry: public.ecr.aws
5151

52+
- name: Setup Gradle
53+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a #4.4.3
54+
5255
- name: Build and push docker image
53-
uses: gradle/gradle-build-action@v3
54-
with:
55-
arguments: :smoke-tests:fakebackend:jib
56+
run: ./gradlew :smoke-tests:fakebackend:jib

‎.github/workflows/e2e-tests-app-with-java-agent.yml‎

Lines changed: 21 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -25,19 +25,19 @@ jobs:
2525
runs-on: ubuntu-latest
2626
steps:
2727
- name: Checkout Java Instrumentation repository
28-
uses: actions/checkout@v5
28+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
2929
with:
3030
fetch-depth: 0
3131

32-
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
32+
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 #v5.0.0
3333
with:
3434
java-version: 17
3535
distribution: temurin
3636

3737
# cache local patch outputs
3838
- name: Cache local Maven repository
3939
id: cache-local-maven-repo
40-
uses: actions/cache@v3
40+
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 #v4.2.4
4141
with:
4242
path: |
4343
~/.m2/repository/io/opentelemetry/
@@ -51,47 +51,48 @@ jobs:
5151
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
5252

5353
- name: Validate the checksums of Gradle Wrapper
54-
uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
54+
uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a #v4.4.3
5555

5656
- name: Configure AWS Credentials
57-
uses: aws-actions/configure-aws-credentials@v4
57+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0
5858
with:
5959
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
6060
aws-region: ${{ env.AWS_DEFAULT_REGION }}
6161

6262
- name: Log in to AWS ECR
63-
uses: docker/login-action@v3
63+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
6464
with:
6565
registry: public.ecr.aws
6666

67+
- name: Setup Gradle
68+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a #4.4.3
69+
6770
- name: Build and push agent and testing docker images with Gradle
68-
uses: gradle/gradle-build-action@v3
69-
with:
70-
arguments: jib
71+
run: ./gradlew jib
7172
env:
7273
COMMIT_HASH: ${{ inputs.image_tag }}
7374

74-
- uses: codecov/codecov-action@v5
75+
- uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 #v5.5.1
7576

7677
test_Spring_App_With_Java_Agent:
7778
name: Test Spring App with AWS OTel Java agent
7879
needs: [ build_Images_For_Testing_Sample_App_With_Java_Agent ]
7980
runs-on: ubuntu-latest
8081

8182
steps:
82-
- uses: actions/checkout@v5
83+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
8384

8485
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
8586
with:
8687
java-version: 17
8788
distribution: 'temurin'
8889
- name: Configure AWS Credentials
89-
uses: aws-actions/configure-aws-credentials@v4
90+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #v5.0.0
9091
with:
9192
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
9293
aws-region: ${{ env.AWS_DEFAULT_REGION }}
9394
- name: Log in to AWS ECR
94-
uses: docker/login-action@v3
95+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
9596
with:
9697
registry: public.ecr.aws
9798

@@ -110,19 +111,19 @@ jobs:
110111
runs-on: ubuntu-latest
111112

112113
steps:
113-
- uses: actions/checkout@v5
114+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
114115

115116
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
116117
with:
117118
java-version: 17
118119
distribution: 'temurin'
119120
- name: Configure AWS Credentials
120-
uses: aws-actions/configure-aws-credentials@v4
121+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #v5.0.0
121122
with:
122123
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
123124
aws-region: ${{ env.AWS_DEFAULT_REGION }}
124125
- name: Log in to AWS ECR
125-
uses: docker/login-action@v3
126+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
126127
with:
127128
registry: public.ecr.aws
128129

@@ -141,19 +142,19 @@ jobs:
141142
runs-on: ubuntu-latest
142143

143144
steps:
144-
- uses: actions/checkout@v5
145+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
145146

146-
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
147+
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 #v5.0.0
147148
with:
148149
java-version: 17
149150
distribution: 'temurin'
150151
- name: Configure AWS Credentials
151-
uses: aws-actions/configure-aws-credentials@v4
152+
uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #v5.0.0
152153
with:
153154
role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
154155
aws-region: ${{ env.AWS_DEFAULT_REGION }}
155156
- name: Log in to AWS ECR
156-
uses: docker/login-action@v3
157+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0
157158
with:
158159
registry: public.ecr.aws
159160

0 commit comments

Comments
 (0)