Skip to content

Navigation Menu

Sign inAppearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Sign upAppearance settings

You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

actions /setup-javaPublic

Notifications You must be signed in to change notification settings
Fork 868
Star 2k

Code
Issues4
Pull requests1
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

chore: Harden workflows: least-privilege permissions + zizmor integration - #1039

#1039

Merged

gdams merged 5 commits into

actions:mainactions/setup-java:mainfrom

brunoborges:harden-workflows-zizmorbrunoborges/setup-java:harden-workflows-zizmorCopy head branch name to clipboard

Jun 23, 2026

Conversation Commits5 (5)Checks Files changed

Merged

chore: Harden workflows: least-privilege permissions + zizmor integration#1039
gdams merged 5 commits into
actions:mainfrom
brunoborges:harden-workflows-zizmor

Merge branch 'main' into harden-workflows-zizmor

59167d9

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Sign in for the full log view

Validate publishing functionality on: pull_request 16

Validate settings.xml (macos-latest)

Validate settings.xml (windows-latest)

Validate settings.xml (ubuntu-latest)

settings.xml is overwritten if flag is true (macos-latest)

settings.xml is overwritten if flag is true (windows-latest)

settings.xml is overwritten if flag is true (ubuntu-latest)

settings.xml is not overwritten if flag is false (macos-latest)

settings.xml is not overwritten if flag is false (windows-latest)

settings.xml is not overwritten if flag is false (ubuntu-latest)

settings.xml in custom location (macos-latest)

settings.xml in custom location (windows-latest)

settings.xml in custom location (ubuntu-latest)

Basic validation on: pull_request 31

Basic validation / build (ubuntu-latest)

Basic validation / build (windows-latest)

Basic validation / build (macos-latest)

Licensed on: pull_request

Licensed / Check licenses

Validate Java e2e on: pull_request 79

temurin 21 (jdk-x64) - macos-15-intel

temurin 11 (jdk-x64) - macos-15-intel

temurin 17 (jdk-x64) - macos-15-intel

adopt 21 (jdk-x64) - macos-15-intel

adopt 11 (jdk-x64) - macos-15-intel

adopt 17 (jdk-x64) - macos-15-intel

adopt-openj9 21 (jdk-x64) - macos-15-intel

adopt-openj9 11 (jdk-x64) - macos-15-intel

adopt-openj9 17 (jdk-x64) - macos-15-intel

zulu 21 (jdk-x64) - macos-15-intel

zulu 11 (jdk-x64) - macos-15-intel

zulu 17 (jdk-x64) - macos-15-intel

liberica 21 (jdk-x64) - macos-15-intel

liberica 11 (jdk-x64) - macos-15-intel

liberica 17 (jdk-x64) - macos-15-intel

microsoft 21 (jdk-x64) - macos-15-intel

microsoft 11 (jdk-x64) - macos-15-intel

microsoft 17 (jdk-x64) - macos-15-intel

semeru 21 (jdk-x64) - macos-15-intel

semeru 11 (jdk-x64) - macos-15-intel

semeru 17 (jdk-x64) - macos-15-intel

corretto 21 (jdk-x64) - macos-15-intel

corretto 11 (jdk-x64) - macos-15-intel

corretto 17 (jdk-x64) - macos-15-intel

sapmachine 21 (jdk-x64) - macos-15-intel

sapmachine 11 (jdk-x64) - macos-15-intel

sapmachine 17 (jdk-x64) - macos-15-intel

jetbrains 21 (jdk-x64) - macos-15-intel

jetbrains 11 (jdk-x64) - macos-15-intel

jetbrains 17 (jdk-x64) - macos-15-intel

temurin 21 (jdk-x64) - windows-latest

temurin 11 (jdk-x64) - windows-latest

temurin 17 (jdk-x64) - windows-latest

adopt 21 (jdk-x64) - windows-latest

adopt 11 (jdk-x64) - windows-latest

adopt 17 (jdk-x64) - windows-latest

adopt-openj9 21 (jdk-x64) - windows-latest

adopt-openj9 11 (jdk-x64) - windows-latest

adopt-openj9 17 (jdk-x64) - windows-latest

zulu 21 (jdk-x64) - windows-latest

zulu 11 (jdk-x64) - windows-latest

zulu 17 (jdk-x64) - windows-latest

liberica 21 (jdk-x64) - windows-latest

liberica 11 (jdk-x64) - windows-latest

liberica 17 (jdk-x64) - windows-latest

microsoft 21 (jdk-x64) - windows-latest

microsoft 11 (jdk-x64) - windows-latest

microsoft 17 (jdk-x64) - windows-latest

semeru 21 (jdk-x64) - windows-latest

semeru 11 (jdk-x64) - windows-latest

semeru 17 (jdk-x64) - windows-latest

corretto 21 (jdk-x64) - windows-latest

corretto 11 (jdk-x64) - windows-latest

corretto 17 (jdk-x64) - windows-latest

dragonwell 21 (jdk-x64) - windows-latest

dragonwell 11 (jdk-x64) - windows-latest

dragonwell 17 (jdk-x64) - windows-latest

sapmachine 21 (jdk-x64) - windows-latest

sapmachine 11 (jdk-x64) - windows-latest

sapmachine 17 (jdk-x64) - windows-latest

jetbrains 21 (jdk-x64) - windows-latest

jetbrains 11 (jdk-x64) - windows-latest

jetbrains 17 (jdk-x64) - windows-latest

temurin 21 (jdk-x64) - ubuntu-latest

temurin 11 (jdk-x64) - ubuntu-latest

temurin 17 (jdk-x64) - ubuntu-latest

adopt 21 (jdk-x64) - ubuntu-latest

adopt 11 (jdk-x64) - ubuntu-latest

adopt 17 (jdk-x64) - ubuntu-latest

adopt-openj9 21 (jdk-x64) - ubuntu-latest

adopt-openj9 11 (jdk-x64) - ubuntu-latest

adopt-openj9 17 (jdk-x64) - ubuntu-latest

zulu 21 (jdk-x64) - ubuntu-latest

zulu 11 (jdk-x64) - ubuntu-latest

zulu 17 (jdk-x64) - ubuntu-latest

liberica 21 (jdk-x64) - ubuntu-latest

liberica 11 (jdk-x64) - ubuntu-latest

liberica 17 (jdk-x64) - ubuntu-latest

microsoft 21 (jdk-x64) - ubuntu-latest

microsoft 11 (jdk-x64) - ubuntu-latest

microsoft 17 (jdk-x64) - ubuntu-latest

semeru 21 (jdk-x64) - ubuntu-latest

semeru 11 (jdk-x64) - ubuntu-latest

semeru 17 (jdk-x64) - ubuntu-latest

corretto 21 (jdk-x64) - ubuntu-latest

corretto 11 (jdk-x64) - ubuntu-latest

corretto 17 (jdk-x64) - ubuntu-latest

dragonwell 21 (jdk-x64) - ubuntu-latest

dragonwell 11 (jdk-x64) - ubuntu-latest

dragonwell 17 (jdk-x64) - ubuntu-latest

sapmachine 21 (jdk-x64) - ubuntu-latest

sapmachine 11 (jdk-x64) - ubuntu-latest

sapmachine 17 (jdk-x64) - ubuntu-latest

jetbrains 21 (jdk-x64) - ubuntu-latest

jetbrains 11 (jdk-x64) - ubuntu-latest

jetbrains 17 (jdk-x64) - ubuntu-latest

microsoft 25 (jdk-x64) - windows-latest

microsoft 25 (jdk-x64) - ubuntu-latest

microsoft 25 (jdk-x64) - macos-latest

oracle 17 (jdk-x64) - macos-15-intel

oracle 21 (jdk-x64) - windows-latest

oracle 21 (jdk-x64) - ubuntu-latest

graalvm 17.0.12 (jdk-x64) - macos-latest

graalvm 21 (jdk-x64) - windows-latest

graalvm 21 (jdk-x64) - ubuntu-latest

graalvm 24-ea (jdk-x64) - ubuntu-latest

temurin 21 (jdk-x64) - alpine-linux - ubuntu-latest

temurin 17 (jdk-x64) - alpine-linux - ubuntu-latest

sapmachine 21 (jdk-x64) - alpine-linux - ubuntu-latest

sapmachine 17 (jdk-x64) - alpine-linux - ubuntu-latest

temurin version (should be from input) - macos-latest

temurin version (should be from input) - macos-latest

microsoft version (should be from input) - macos-latest

microsoft version (should be from input) - macos-latest

corretto version (should be from input) - macos-latest

corretto version (should be from input) - macos-latest

temurin version (should be from input) - windows-latest

temurin version (should be from input) - windows-latest

microsoft version (should be from input) - windows-latest

microsoft version (should be from input) - windows-latest

corretto version (should be from input) - windows-latest

corretto version (should be from input) - windows-latest

temurin version (should be from input) - ubuntu-latest

temurin version (should be from input) - ubuntu-latest

microsoft version (should be from input) - ubuntu-latest

microsoft version (should be from input) - ubuntu-latest

corretto version (should be from input) - ubuntu-latest

corretto version (should be from input) - ubuntu-latest

temurin version from file X - macos-latest

temurin version from file X - macos-latest

zulu version from file X - macos-latest

zulu version from file X - macos-latest

liberica version from file X - macos-latest

liberica version from file X - macos-latest

microsoft version from file X - macos-latest

microsoft version from file X - macos-latest

corretto version from file X - macos-latest

corretto version from file X - macos-latest

temurin version from file X - windows-latest

temurin version from file X - windows-latest

zulu version from file X - windows-latest

zulu version from file X - windows-latest

liberica version from file X - windows-latest

liberica version from file X - windows-latest

microsoft version from file X - windows-latest

microsoft version from file X - windows-latest

corretto version from file X - windows-latest

corretto version from file X - windows-latest

temurin version from file X - ubuntu-latest

temurin version from file X - ubuntu-latest

zulu version from file X - ubuntu-latest

zulu version from file X - ubuntu-latest

liberica version from file X - ubuntu-latest

liberica version from file X - ubuntu-latest

microsoft version from file X - ubuntu-latest

microsoft version from file X - ubuntu-latest

corretto version from file X - ubuntu-latest

corretto version from file X - ubuntu-latest

adopt version from file X.Y.Z - macos-latest

adopt version from file X.Y.Z - macos-latest

adopt-openj9 version from file X.Y.Z - macos-latest

adopt-openj9 version from file X.Y.Z - macos-latest

zulu version from file X.Y.Z - macos-latest

zulu version from file X.Y.Z - macos-latest

adopt version from file X.Y.Z - windows-latest

adopt version from file X.Y.Z - windows-latest

adopt-openj9 version from file X.Y.Z - windows-latest

adopt-openj9 version from file X.Y.Z - windows-latest

zulu version from file X.Y.Z - windows-latest

zulu version from file X.Y.Z - windows-latest

adopt version from file X.Y.Z - ubuntu-latest

adopt version from file X.Y.Z - ubuntu-latest

adopt-openj9 version from file X.Y.Z - ubuntu-latest

adopt-openj9 version from file X.Y.Z - ubuntu-latest

zulu version from file X.Y.Z - ubuntu-latest

zulu version from file X.Y.Z - ubuntu-latest

adopt version from file '.java-version' - macos-latest

adopt version from file '.tool-versions' - macos-latest

adopt version from file '.sdkmanrc' - macos-latest

zulu version from file '.java-version' - macos-latest

zulu version from file '.tool-versions' - macos-latest

zulu version from file '.sdkmanrc' - macos-latest

liberica version from file '.java-version' - macos-latest

liberica version from file '.tool-versions' - macos-latest

liberica version from file '.sdkmanrc' - macos-latest

adopt version from file '.java-version' - windows-latest

adopt version from file '.tool-versions' - windows-latest

adopt version from file '.sdkmanrc' - windows-latest

zulu version from file '.java-version' - windows-latest

zulu version from file '.tool-versions' - windows-latest

zulu version from file '.sdkmanrc' - windows-latest

liberica version from file '.java-version' - windows-latest

liberica version from file '.tool-versions' - windows-latest

liberica version from file '.sdkmanrc' - windows-latest

adopt version from file '.java-version' - ubuntu-latest

adopt version from file '.tool-versions' - ubuntu-latest

adopt version from file '.sdkmanrc' - ubuntu-latest

zulu version from file '.java-version' - ubuntu-latest

zulu version from file '.tool-versions' - ubuntu-latest

zulu version from file '.sdkmanrc' - ubuntu-latest

liberica version from file '.java-version' - ubuntu-latest

liberica version from file '.tool-versions' - ubuntu-latest

liberica version from file '.sdkmanrc' - ubuntu-latest

temurin 11.0 (jdk-x64) - macos-latest

temurin 21.0 (jdk-x64) - macos-latest

temurin 17.0.7+7 (jdk-x64) - macos-latest

zulu 11.0 (jdk-x64) - macos-latest

zulu 21.0 (jdk-x64) - macos-latest

zulu 17.0.7+7 (jdk-x64) - macos-latest

liberica 11.0 (jdk-x64) - macos-latest

liberica 21.0 (jdk-x64) - macos-latest

liberica 17.0.7+7 (jdk-x64) - macos-latest

temurin 11.0 (jdk-x64) - windows-latest

temurin 21.0 (jdk-x64) - windows-latest

temurin 17.0.7+7 (jdk-x64) - windows-latest

zulu 11.0 (jdk-x64) - windows-latest

zulu 21.0 (jdk-x64) - windows-latest

zulu 17.0.7+7 (jdk-x64) - windows-latest

liberica 11.0 (jdk-x64) - windows-latest

liberica 21.0 (jdk-x64) - windows-latest

liberica 17.0.7+7 (jdk-x64) - windows-latest

temurin 11.0 (jdk-x64) - ubuntu-latest

temurin 21.0 (jdk-x64) - ubuntu-latest

temurin 17.0.7+7 (jdk-x64) - ubuntu-latest

zulu 11.0 (jdk-x64) - ubuntu-latest

zulu 21.0 (jdk-x64) - ubuntu-latest

zulu 17.0.7+7 (jdk-x64) - ubuntu-latest

liberica 11.0 (jdk-x64) - ubuntu-latest

liberica 21.0 (jdk-x64) - ubuntu-latest

liberica 17.0.7+7 (jdk-x64) - ubuntu-latest

oracle 21.0.4 (jdk-x64) - ubuntu-latest

graalvm 21.0.4 (jdk-x64) - ubuntu-latest

dragonwell 11.0 (jdk-x64) - ubuntu-latest

dragonwell 11.0.13+9 (jdk-x64) - ubuntu-latest

sapmachine 17.0.7 (jdk-x64) - ubuntu-latest

jetbrains 11.0.11 (jdk-x64) - ubuntu-latest

jetbrains 17.0.7 (jdk-x64) - ubuntu-latest

temurin - check-latest flag - macos-latest

zulu - check-latest flag - macos-latest

liberica - check-latest flag - macos-latest

sapmachine - check-latest flag - macos-latest

jetbrains - check-latest flag - macos-latest

temurin - check-latest flag - windows-latest

zulu - check-latest flag - windows-latest

liberica - check-latest flag - windows-latest

dragonwell - check-latest flag - windows-latest

sapmachine - check-latest flag - windows-latest

jetbrains - check-latest flag - windows-latest

temurin - check-latest flag - ubuntu-latest

zulu - check-latest flag - ubuntu-latest

liberica - check-latest flag - ubuntu-latest

dragonwell - check-latest flag - ubuntu-latest

sapmachine - check-latest flag - ubuntu-latest

jetbrains - check-latest flag - ubuntu-latest

temurin - multiple jdks - macos-latest

zulu - multiple jdks - macos-latest

liberica - multiple jdks - macos-latest

sapmachine - multiple jdks - macos-latest

jetbrains - multiple jdks - macos-latest

temurin - multiple jdks - windows-latest

zulu - multiple jdks - windows-latest

liberica - multiple jdks - windows-latest

dragonwell - multiple jdks - windows-latest

sapmachine - multiple jdks - windows-latest

jetbrains - multiple jdks - windows-latest

temurin - multiple jdks - ubuntu-latest

zulu - multiple jdks - ubuntu-latest

liberica - multiple jdks - ubuntu-latest

dragonwell - multiple jdks - ubuntu-latest

sapmachine - multiple jdks - ubuntu-latest

jetbrains - multiple jdks - ubuntu-latest

zulu 17-ea (jdk-x64) - macos-15-intel

zulu 15.0.0-ea.14 (jdk-x64) - macos-15-intel

zulu 17-ea (jdk-x64) - windows-latest

zulu 15.0.0-ea.14 (jdk-x64) - windows-latest

zulu 17-ea (jdk-x64) - ubuntu-latest

zulu 15.0.0-ea.14 (jdk-x64) - ubuntu-latest

temurin 17-ea (jdk-x64) - macos-latest

temurin 17-ea (jdk-x64) - windows-latest

temurin 17-ea (jdk-x64) - ubuntu-latest

sapmachine 17-ea (jdk-x64) - macos-latest

sapmachine 21-ea (jdk-x64) - macos-latest

sapmachine 17-ea (jdk-x64) - windows-latest

sapmachine 21-ea (jdk-x64) - windows-latest

sapmachine 17-ea (jdk-x64) - ubuntu-latest

sapmachine 21-ea (jdk-x64) - ubuntu-latest

temurin 17.0 (jre-x64) - macos-15-intel

zulu 17.0 (jre-x64) - macos-15-intel

liberica 17.0 (jre-x64) - macos-15-intel

semeru 17.0 (jre-x64) - macos-15-intel

sapmachine 17.0 (jre-x64) - macos-15-intel

jetbrains 17.0 (jre-x64) - macos-15-intel

temurin 17.0 (jre-x64) - windows-latest

zulu 17.0 (jre-x64) - windows-latest

liberica 17.0 (jre-x64) - windows-latest

semeru 17.0 (jre-x64) - windows-latest

sapmachine 17.0 (jre-x64) - windows-latest

jetbrains 17.0 (jre-x64) - windows-latest

temurin 17.0 (jre-x64) - ubuntu-latest

zulu 17.0 (jre-x64) - ubuntu-latest

liberica 17.0 (jre-x64) - ubuntu-latest

semeru 17.0 (jre-x64) - ubuntu-latest

sapmachine 17.0 (jre-x64) - ubuntu-latest

jetbrains 17.0 (jre-x64) - ubuntu-latest

zulu 21 (jre+fx-x64) - ubuntu-latest

zulu 21.0 (jdk+fx-x64) - ubuntu-latest

liberica 21 (jdk+fx-x64) - ubuntu-latest

liberica 11 (jre+fx-x64) - ubuntu-latest

corretto 8 (jre-x64) - windows-latest

jetbrains 11 (jdk+jcef-x64) - ubuntu-latest

jetbrains 17 (jdk+jcef-x64) - ubuntu-latest

jetbrains 21 (jdk+jcef-x64) - ubuntu-latest

jetbrains 11 (jre+jcef-x64) - ubuntu-latest

jetbrains 17 (jre+jcef-x64) - ubuntu-latest

jetbrains 21 (jre+jcef-x64) - ubuntu-latest

jetbrains 17 (jdk+ft-x64) - ubuntu-latest

jetbrains 21 (jdk+ft-x64) - ubuntu-latest

jetbrains 17 (jre+ft-x64) - ubuntu-latest

jetbrains 21 (jre+ft-x64) - ubuntu-latest

liberica 11 (jdk-) - windows-latest

zulu 11 (jdk-) - windows-latest

corretto 11 (jdk-) - windows-latest

liberica 11 (jdk-) - ubuntu-22.04

zulu 11 (jdk-) - ubuntu-22.04

corretto 11 (jdk-) - ubuntu-22.04

Validate cache on: pull_request 19

gradle-save (macos-15-intel)

gradle-save (windows-latest)

gradle-save (ubuntu-latest)

maven-save (macos-15-intel)

maven-save (windows-latest)

maven-save (ubuntu-latest)

sbt-save (macos-15-intel)

sbt-save (windows-latest)

sbt-save (ubuntu-22.04)

gradle-restore (macos-15-intel)

gradle-restore (windows-latest)

gradle-restore (ubuntu-latest)

maven-restore (macos-15-intel)

maven-restore (windows-latest)

maven-restore (ubuntu-latest)

sbt-restore (macos-15-intel)

sbt-restore (windows-latest)

sbt-restore (ubuntu-22.04)

Security analysis with zizmor on: pull_request 1

Analyze workflows with zizmor

Check dist/ on: pull_request

Check dist/ / check-dist

Validate cache with cache-dependency-path option on: pull_request 15

gradle1-save (macos-latest)

gradle1-save (windows-latest)

gradle1-save (ubuntu-latest)

gradle1-restore (macos-latest)

gradle1-restore (windows-latest)

gradle1-restore (ubuntu-latest)

gradle2-restore (macos-latest)

gradle2-restore (windows-latest)

gradle2-restore (ubuntu-latest)

Validate local file on: pull_request 3

Validate installation from local file Adopt (macos-latest)

Validate installation from local file Adopt (windows-latest)

Validate installation from local file Adopt (ubuntu-latest)

Validate installation from local file Zulu (macos-latest)

Validate installation from local file Zulu (windows-latest)

Validate installation from local file Zulu (ubuntu-latest)

Validate installation from local file Eclipse Temurin (macos-latest)

Validate installation from local file Eclipse Temurin (windows-latest)

Validate installation from local file Eclipse Temurin (ubuntu-latest)

CodeQL analysis on: pull_request

CodeQL analysis / Analyze (javascript)

Code scanning results

Annotations

1 notice

AdoptOpenJDK has moved to Eclipse Temurin https://github.com/actions/setup-java#supported-distributions please consider changing to the 'temurin' distribution type in your setup-java configuration.

Validate settings.xml (ubuntu-latest)

succeeded Jun 23, 2026 in 14s

Loading

Re-running jobs...

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.