workflow: update scorecard.yml

Trendyol · Feb 1, 2025 · 1c30828 · 1c30828
1 parent 4a150ef
commit 1c30828
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -35,12 +35,12 @@ jobs:
       id-token: write
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@v2.2.0
+        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736
         with:
           results_file: results.sarif
           results_format: sarif
@@ -54,7 +54,7 @@ jobs:
         run: ls -lah results.sarif || echo "results.sarif NOT FOUND"
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@97a0fba1372883ab732affbe8f94b823f91727db
         with:
           name: es-query-builder-sarif