ci(scorecard): fix workflow artifact handling and pin action SHAs

This commit is contained in:
adrian adewunmi 2026-07-16 08:34:31 +01:00
parent f9b5ba74a4
commit d95feffbca
1 changed files with 2 additions and 2 deletions

View File

@ -59,7 +59,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@v7
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
with:
# Use a simple, lowercase artifact name without spaces to avoid API validation
name: results-sarif
@ -79,7 +79,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: "Download SARIF artifact"
uses: actions/download-artifact@v4
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
with:
name: results-sarif