ci: pin upload-artifacts action to commit hash

Signed-off-by: Bradley Jones <bradley.jones@anchore.com>
anchore · Dec 7, 2023 · 92d8782 · 92d8782
1 parent 5b0d406
commit 92d8782
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -102,7 +102,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 #v3.1.3
         with:
           name: artifacts
           path: dist/**/*
diff --git a/.github/workflows/snapshot.yaml b/.github/workflows/snapshot.yaml
@@ -39,7 +39,7 @@ jobs:
       - name: Build snapshot artifacts
         run: make snapshot
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 #v3.1.3
         with:
           name: artifacts
           path: snapshot/**/*