From 870dc1654daca68a9a777b5e0675c1723571c846 Mon Sep 17 00:00:00 2001 From: PinGuard Date: Wed, 22 Jul 2026 14:46:56 +0200 Subject: [PATCH] ci: pin GitHub Actions to commit SHAs (4 pin(s)) --- .github/workflows/e2e.yml | 2 +- .github/workflows/release.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index 861f4f01..7011061c 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -70,7 +70,7 @@ jobs: - name: Upload test results on failure if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: e2e-test-results-${{ matrix.os }} path: apps/app/test-results/ diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ad907067..3dca0cca 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -49,7 +49,7 @@ jobs: mv "$ZIP" "apps/app/dist/Spool-${VERSION}-arm64-mac.zip" - name: Upload mac artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mac-artifacts path: | @@ -90,7 +90,7 @@ jobs: mv "$APPIMAGE" "apps/app/dist/Spool-${VERSION}-x86_64.AppImage" - name: Upload linux artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: linux-artifacts path: | @@ -111,7 +111,7 @@ jobs: run: echo "version=$(jq -r .version apps/app/package.json)" >> "$GITHUB_OUTPUT" - name: Download all artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: path: artifacts merge-multiple: true