From 851c858c23ad1c0ae02e5d58467c9079ccf58f6b Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 17 Jul 2026 06:05:12 +0000 Subject: [PATCH] fix: bump actions/upload-artifact to v4 in scorecard workflow The Scorecard analysis workflow was failing because it used the deprecated v3 of actions/upload-artifact. Bump to v4.6.2 (pinned SHA). Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01WTdFyubvvxGwAdkGvnZuUA --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 14677133b..021e79808 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -55,7 +55,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.1.0 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: SARIF file path: results.sarif