@@ -66,13 +66,13 @@ jobs:
66
66
# Store the hash in a file, which is uploaded as a workflow artifact.
67
67
sha256sum $ARTIFACTS | base64 -w0 > artifacts-sha256
68
68
- name : Upload build artifacts
69
- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
69
+ uses : actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
70
70
with :
71
71
name : gradle-build-outputs
72
72
path : build/repo/${{ steps.publish.outputs.group }}/*/${{ steps.publish.outputs.version }}/*
73
73
retention-days : 5
74
74
- name : Upload artifacts-sha256
75
- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
75
+ uses : actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
76
76
with :
77
77
name : artifacts-sha256
78
78
path : artifacts-sha256
@@ -115,7 +115,7 @@ jobs:
115
115
artifacts-sha256 : ${{ steps.set-hash.outputs.artifacts-sha256 }}
116
116
steps :
117
117
- name : Download artifacts-sha256
118
- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
118
+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
119
119
with :
120
120
name : artifacts-sha256
121
121
# The SLSA provenance generator expects the hash digest of artifacts to be passed as a job
@@ -148,7 +148,7 @@ jobs:
148
148
- name : Checkout repository
149
149
uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
150
150
- name : Download artifacts
151
- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
151
+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
152
152
with :
153
153
name : gradle-build-outputs
154
154
path : build/repo
@@ -160,6 +160,6 @@ jobs:
160
160
- name : Upload assets
161
161
# Upload the artifacts to the existing release. Note that the SLSA provenance will
162
162
# attest to each artifact file and not the aggregated ZIP file.
163
- uses : softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
163
+ uses : softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8
164
164
with :
165
165
files : artifacts.zip
0 commit comments