Merge pull request #257 from deleonenriqueta/update-snyk-workflow

Update Snyk Workflow
newrelic · May 25, 2024 · b4474f9 · b4474f9
2 parents 132cf79 + 493b228
commit b4474f9
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/snyk-vulnerability-scan.yml b/.github/workflows/snyk-vulnerability-scan.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Java Agent
-        uses: actions/checkout@v3
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # pin@v4
         with:
           ref: 'main'
 
@@ -25,9 +25,9 @@ jobs:
           echo "jdk17=/tmp" >> gradle.properties
 
       - name: Run Snyk to check for vulnerabilities
-        uses: snyk/actions/gradle@master
+        uses: snyk/actions/gradle-jdk11@8349f9043a8b7f0f3ee8885bf28f0b388d2446e8 # pin@master
         env:
           SNYK_TOKEN: ${{ secrets.JAVA_AGENT_SNYK_TOKEN }}
         with:
           command: monitor
-          args: --all-sub-projects --org=java-agent --configuration-matching='(includeInJar)|(shadowIntoJar)'
+          args: --all-sub-projects --org=java-agent --configuration-matching='(includeInJar)|(shadowIntoJar)'