ci(scorecard): fix workflow artifact handling and pin action SHAs
This commit is contained in:
parent
f9b5ba74a4
commit
d95feffbca
|
|
@ -59,7 +59,7 @@ jobs:
|
|||
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
|
||||
# format to the repository Actions tab.
|
||||
- name: "Upload artifact"
|
||||
uses: actions/upload-artifact@v7
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
|
||||
with:
|
||||
# Use a simple, lowercase artifact name without spaces to avoid API validation
|
||||
name: results-sarif
|
||||
|
|
@ -79,7 +79,7 @@ jobs:
|
|||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: "Download SARIF artifact"
|
||||
uses: actions/download-artifact@v4
|
||||
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
|
||||
with:
|
||||
name: results-sarif
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue