Pin Remaining Action Dependencies (Except OSS-Fuzz)

The one that isn't pinned is the OSS-Fuzz builder and runner. They don't offer tagged releases. I could pin to the current master commit, but I'm not sure how desirable that is.
2022-12-20 17:10:01 -05:00
parent 0790e86c56
commit 150aa23ef4
3 changed files with 6 additions and 6 deletions
@@ -51,7 +51,7 @@ jobs:
      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
      # format to the repository Actions tab.
      - name: "Upload artifact"
-        uses: actions/upload-artifact@v3 # tag=v3.0.0
+        uses: actions/upload-artifact@83fd05a356d7e2593de66fc9913b3002723633cb # tag=v3.1.1
        with:
          name: SARIF file
          path: results.sarif