From a4974e9bc6d13f7842da9d0bf2b34f9708aa7f48 Mon Sep 17 00:00:00 2001
From: Di-Shi Sun <di-shi.sun@transnexus.com>
Date: Thu, 19 Mar 2026 09:56:12 -0400
Subject: [PATCH] Updated GitHub Actions SHA.

---
 .github/workflows/c-cpp.yml           | 12 ++---
 .github/workflows/codeql-analysis.yml | 71 ---------------------------
 .github/workflows/release-package.yml | 12 ++---
 3 files changed, 12 insertions(+), 83 deletions(-)
 delete mode 100644 .github/workflows/codeql-analysis.yml

diff --git a/.github/workflows/c-cpp.yml b/.github/workflows/c-cpp.yml
index 307db15..7da5fa2 100644
--- a/.github/workflows/c-cpp.yml
+++ b/.github/workflows/c-cpp.yml
@@ -14,14 +14,14 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - run: |
           yum install -y epel-release
           yum install -y make gcc-c++ openssl-devel utf8proc-devel
       - run: |
           cd $GITHUB_WORKSPACE/src
           make build
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: osptoolkit
           path: |
@@ -34,16 +34,16 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-java@v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: "21"
           distribution: "corretto"
           cache: "maven"
           server-id: github
-      - uses: actions/download-artifact@v8
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: osptoolkit
       - run: |
           mv libosptk.a lib
-          mvn -B install
+          mvn -B clean install
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
deleted file mode 100644
index 9777231..0000000
--- a/.github/workflows/codeql-analysis.yml
+++ /dev/null
@@ -1,71 +0,0 @@
-name: "CodeQL"
-
-on:
-  push:
-    branches: [master]
-  pull_request:
-    branches: [master]
-  schedule:
-    - cron: "28 21 * * 6"
-  workflow_dispatch:
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ["cpp"]
-        # os: [centos7, rhel8]
-        os: [rhel8]
-        include:
-          # - os: centos7
-          #   container: "centos:7"
-          - os: rhel8
-            container: "oraclelinux:8"
-    container: ${{ matrix.container }}
-
-    steps:
-      - name: Checkout for centos7
-        if: ${{ matrix.os == 'centos7' }}
-        uses: actions/checkout@v3
-
-      - name: Checkout for rhel8
-        if: ${{ matrix.os == 'rhel8' }}
-        uses: actions/checkout@v4
-
-      # Initializes the CodeQL tools for scanning.
-      - name: Initialize CodeQL for centos7
-        if: ${{ matrix.os == 'centos7' }}
-        uses: github/codeql-action/init@v2
-        with:
-          queries: security-extended
-          languages: ${{ matrix.language }}
-
-      - name: Initialize CodeQL for rhel8
-        if: ${{ matrix.os == 'rhel8' }}
-        uses: github/codeql-action/init@v3
-        with:
-          queries: security-extended
-          languages: ${{ matrix.language }}
-
-      # ℹ️ Command-line programs to run using the OS shell.
-      # 📚 https://git.io/JvXDl
-
-      - name: Build osptoolkit
-        run: |
-          yum install -y epel-release
-          yum install -y make gcc-c++ openssl-devel utf8proc-devel
-          cd $GITHUB_WORKSPACE/src
-          make build
-          cd $GITHUB_WORKSPACE/test
-          make linux
-
-      - name: Perform CodeQL Analysis for centos7
-        if: ${{ matrix.os == 'centos7' }}
-        uses: github/codeql-action/analyze@v2
-
-      - name: Perform CodeQL Analysis for rhel8
-        if: ${{ matrix.os == 'rhel8' }}
-        uses: github/codeql-action/analyze@v3
diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 6557780..00616bf 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -11,14 +11,14 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - run: |
           yum install -y epel-release
           yum install -y make gcc-c++ openssl-devel utf8proc-devel
       - run: |
           cd $GITHUB_WORKSPACE/src
           make build
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: osptoolkit
           path: |
@@ -32,18 +32,18 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-java@v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: "21"
           distribution: "corretto"
           cache: "maven"
           server-id: github
-      - uses: actions/download-artifact@v8
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: osptoolkit
       - run: |
           mv libosptk.a lib
-          mvn -B deploy
+          mvn -B clean deploy
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}