From cef28023e4b8c938c3076ea7b8b2664d58dbd471 Mon Sep 17 00:00:00 2001 From: Vasil Boyadzhiev Date: Thu, 24 Oct 2024 10:19:20 +0300 Subject: [PATCH] ci: Updating actions to their step-security maintained version. Signed-off-by: Vasil Boyadzhiev --- .github/workflows/flow-deploy-release-artifact.yaml | 2 +- .github/workflows/zxc-release-maven-central.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/flow-deploy-release-artifact.yaml b/.github/workflows/flow-deploy-release-artifact.yaml index f70f8f79..753671c9 100644 --- a/.github/workflows/flow-deploy-release-artifact.yaml +++ b/.github/workflows/flow-deploy-release-artifact.yaml @@ -141,7 +141,7 @@ jobs: - name: Import GPG key id: gpg_key - uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6.1.0 + uses: step-security/ghaction-import-gpg@6c8fe4d0126a59d57c21f87c9ae5dd3451fa3cca # v6.1.0 with: gpg_private_key: ${{ secrets.GPG_KEY_CONTENTS }} passphrase: ${{ secrets.GPG_KEY_PASSPHRASE }} diff --git a/.github/workflows/zxc-release-maven-central.yaml b/.github/workflows/zxc-release-maven-central.yaml index 6b682a5f..e62c54c2 100644 --- a/.github/workflows/zxc-release-maven-central.yaml +++ b/.github/workflows/zxc-release-maven-central.yaml @@ -113,7 +113,7 @@ jobs: - name: Import GPG key id: gpg_key - uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6.1.0 + uses: step-security/ghaction-import-gpg@6c8fe4d0126a59d57c21f87c9ae5dd3451fa3cca # v6.1.0 if: ${{ inputs.dry-run-enabled != true && !cancelled() && !failure() }} with: gpg_private_key: ${{ secrets.gpg-key-contents }}