Merge pull request #117 from isaqb-org/116-fix-cve

Fix CVE in gradle action
isaqb-org · Dec 21, 2021 · 59021c4 · 59021c4
2 parents fd7a7b6 + fade592
commit 59021c4
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 12 deletions.
diff --git a/.github/workflows/build_master.yml b/.github/workflows/build_master.yml
@@ -26,14 +26,16 @@ jobs:
  submodules: recursive
  - name: Verify Gradle Wrapper
  uses: gradle/wrapper-validation-action@v1
- - name: Set up JDK 14
- uses: actions/setup-java@v1
+ - name: Set up JDK 17
+ uses: actions/setup-java@v2
  with:
- java-version: 14
+ distribution: 'temurin'
+ java-version: 17
  - name: Execute Gradle Build
- uses: eskatos/gradle-command-action@v1
+ uses: eskatos/gradle-command-action@v2
  with:
  # Gradle command line arguments, see gradle --help
+ gradle-version: 7.2
  arguments: buildDocs
 
  # do the following two things only for a release!

diff --git a/.github/workflows/build_pr.yml b/.github/workflows/build_pr.yml
@@ -24,12 +24,14 @@ jobs:
  submodules: recursive
  - name: Verify Gradle Wrapper
  uses: gradle/wrapper-validation-action@v1
- - name: Set up JDK 14
- uses: actions/setup-java@v1
+ - name: Set up JDK 17
+ uses: actions/setup-java@v2
  with:
- java-version: 14
+ distribution: 'temurin'
+ java-version: 17
  - name: Execute Gradle Build
- uses: eskatos/gradle-command-action@v1
+ uses: eskatos/gradle-command-action@v2
  with:
  # Gradle command line arguments, see gradle --help
+ gradle-version: 7.2
  arguments: buildDocs
diff --git a/.github/workflows/build_releasecandidate.yml b/.github/workflows/build_releasecandidate.yml
@@ -25,14 +25,16 @@ jobs:
  submodules: recursive
  - name: Verify Gradle Wrapper
  uses: gradle/wrapper-validation-action@v1
- - name: Set up JDK 14
- uses: actions/setup-java@v1
+ - name: Set up JDK 17
+ uses: actions/setup-java@v2
  with:
- java-version: 14
+ distribution: 'temurin'
+ java-version: 17
  - name: Execute Gradle Build
- uses: eskatos/gradle-command-action@v1
+ uses: eskatos/gradle-command-action@v2
  with:
  # Gradle command line arguments, see gradle --help
+ gradle-version: 7.2
  arguments: buildDocs
 
  # do the following two things only for a release!