[StepSecurity] ci: Harden GitHub Actions (#2013)

Signed-off-by: StepSecurity Bot <[email protected]>
AlaSQL · Dec 29, 2024 · a02a650 · a02a650
1 parent 17d9032
commit a02a650
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/Build and test.yml b/.github/workflows/Build and test.yml
@@ -29,14 +29,14 @@ jobs:
       - run: yarn install --frozen-lockfile
       - run: yarn build-only
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3.2.1
         with:
           name: dist
           path: dist/
 
       - run: tar -cvf node_modules.tar node_modules
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3.2.1
         with:
           name: node_modules
           path: node_modules.tar