Lock download-artifact action on patch version

philips-labs · Apr 11, 2022 · be0d6af · be0d6af
1 parent 7f47fcc
commit be0d6af
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/example-local.yaml b/.github/workflows/example-local.yaml
@@ -47,7 +47,7 @@ jobs:
         uses: actions/checkout@v3.0.0
 
       - name: Download build artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.0
 
       - name: Generate some extra materials (this usually happens as part of the build process)
         run: |

diff --git a/.github/workflows/example-publish.yaml b/.github/workflows/example-publish.yaml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download build artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v3.0.0
 
       - name: Generate provenance
         uses: philips-labs/slsa-provenance-action@v0.7.2