Use fixed version for runners

Author: ehl-jf

.github/workflows/accessTests.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - "master"
   # Triggers the workflow on PRs to master branch only.
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"
@@ -25,11 +25,11 @@ jobs:
       matrix:
         os:
           - name: ubuntu
-            version: latest
+            version: 24.04
           - name: windows
-            version: latest
+            version: 2022
           - name: macos
-            version: latest
+            version: 14
     runs-on: ${{ matrix.os.name }}-${{ matrix.os.version }}
     steps:
       - name: Skip macOS - JGC-413

.github/workflows/analysis.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches:
       - "master"
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"

.github/workflows/artifactoryTests.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - "master"
   # Triggers the workflow on PRs to master branch only.
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"
@@ -23,11 +23,11 @@ jobs:
         suite: [artifactory, artifactoryProject]
         os:
           - name: ubuntu
-            version: latest
+            version: 24.04
           - name: windows
-            version: latest
+            version: 2022
           - name: macos
-            version: latest
+            version: 14
     runs-on: ${{ matrix.os.name }}-${{ matrix.os.version }}
     env:
       JFROG_CLI_LOG_LEVEL: DEBUG

.github/workflows/cla.yml

@@ -2,9 +2,9 @@ name: "CLA Assistant"
 on:
   # issue_comment triggers this action on each comment on issues and pull requests
   issue_comment:
-    types: [ created ]
-  pull_request_target:
-    types: [ opened, synchronize ]
+    types: [created]
+  pull_request:
+    types: [opened, synchronize]
 jobs:
   CLAssistant:
     runs-on: ubuntu-latest
@@ -15,4 +15,4 @@ jobs:
           event_comment_body: ${{ github.event.comment.body }}
           event_name: ${{ github.event_name }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          CLA_SIGN_TOKEN: ${{ secrets.CLA_SIGN_TOKEN }}
+          CLA_SIGN_TOKEN: ${{ secrets.CLA_SIGN_TOKEN }}

.github/workflows/distributionTests.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - "master"
   # Triggers the workflow on PRs to master branch only.
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"

.github/workflows/dockerTests.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - "master"
   # Triggers the workflow on PRs to master branch only.
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"
@@ -16,8 +16,13 @@ concurrency:
   cancel-in-progress: true
 jobs:
   Docker-tests:
-    name: ubuntu-latest
-    runs-on: ubuntu-latest
+    name: Docker tests (${{ matrix.os.name }})
+    strategy:
+      matrix:
+        os:
+          - name: ubuntu
+            version: 24.04
+    runs-on: ${{ matrix.os.name }}-${{ matrix.os.version }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

.github/workflows/frogbot-scan-pull-request.yml

@@ -1,6 +1,6 @@
 name: "Frogbot Scan Pull Request"
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"
@@ -102,7 +102,7 @@ jobs:
 
           # [Optional, default: "TRUE"]
           # Fails the Frogbot task if any security issue is found.
-          # JF_FAIL: "FALSE"
+          JF_FAIL: "FALSE"
 
           # [Optional]
           # Frogbot will download the project dependencies if they're not cached locally. To download the

.github/workflows/frogbot-scan-repository.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - "master"
   # Triggers the workflow on PRs to master branch only.
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"

.github/workflows/goTests.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - "master"
   # Triggers the workflow on PRs to master branch only.
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
     branches:
       - "master"
@@ -22,11 +22,11 @@ jobs:
       matrix:
         os:
           - name: ubuntu
-            version: latest
+            version: 24.04
           - name: windows
-            version: latest
+            version: 2022
           - name: macos
-            version: latest
+            version: 14
         gradle-version: [5.6.4, 8.3]
     runs-on: ${{ matrix.os.name }}-${{ matrix.os.version }}
     env: