Merge pull request #141 from upbound/renovate/pin-dependencies

Pin dependencies
upbound · Oct 6, 2023 · e0b9eda · e0b9eda
2 parents b2017db + f966bc4
commit e0b9eda
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
@@ -138,14 +138,14 @@ jobs:
           output: 'trivy-results.sarif'
 
       - name: Upload Artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: trivy-${{ env.escaped_filename }}.sarif
           path: trivy-results.sarif
           retention-days: 3
 
       - name: Upload Trivy Scan Results To GitHub Security Tab
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2
         with:
           sarif_file: 'trivy-results.sarif'
           category: ${{ matrix.image }}:${{ env.tag }}