From 7af5bea4f881a95a317ef1e86142f75d8a0101cb Mon Sep 17 00:00:00 2001 From: Vasil Boyadzhiev Date: Wed, 6 Nov 2024 23:17:51 +0200 Subject: [PATCH] ci: Updating actions to their step-security maintained version. (#997) Signed-off-by: Vasil Boyadzhiev Signed-off-by: Roger Barker Co-authored-by: Roger Barker --- .github/workflows/flow-deploy-release-artifact.yaml | 3 ++- .github/workflows/zxc-release-maven-central.yaml | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/flow-deploy-release-artifact.yaml b/.github/workflows/flow-deploy-release-artifact.yaml index ac1d9d77..1583fd9a 100644 --- a/.github/workflows/flow-deploy-release-artifact.yaml +++ b/.github/workflows/flow-deploy-release-artifact.yaml @@ -151,7 +151,8 @@ jobs: - name: Import GPG key id: gpg_key - uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0 + uses: step-security/ghaction-import-gpg@6c8fe4d0126a59d57c21f87c9ae5dd3451fa3cca # v6.1.0 + with: gpg_private_key: ${{ secrets.GPG_KEY_CONTENTS }} passphrase: ${{ secrets.GPG_KEY_PASSPHRASE }} diff --git a/.github/workflows/zxc-release-maven-central.yaml b/.github/workflows/zxc-release-maven-central.yaml index 62a04dc7..2aa046af 100644 --- a/.github/workflows/zxc-release-maven-central.yaml +++ b/.github/workflows/zxc-release-maven-central.yaml @@ -118,7 +118,8 @@ jobs: - name: Import GPG key id: gpg_key - uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0 + uses: step-security/ghaction-import-gpg@6c8fe4d0126a59d57c21f87c9ae5dd3451fa3cca # v6.1.0 + if: ${{ inputs.dry-run-enabled != true && !cancelled() && !failure() }} with: gpg_private_key: ${{ secrets.gpg-key-contents }}