Update GitHub Artifact Actions to v4

datosh-org · Feb 20, 2024 · 3f06fe1 · 3f06fe1
1 parent 114fe31
commit 3f06fe1
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/.github/workflows/calculator-cli.yml b/.github/workflows/calculator-cli.yml
@@ -31,11 +31,11 @@ jobs:
           make build-cli
           syft calculator \
             -o spdx-json=calculator.spdx.json
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
           name: calculator
           path: calculator
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
           name: calculator.spdx.json
           path: calculator.spdx.json
@@ -64,11 +64,11 @@ jobs:
       - provenance
     steps:
       - name: Download calculator binary
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: calculator
       - name: Download provenance
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: ${{ needs.provenance.outputs.provenance-name }}
       - name: Install slsa-verifier
@@ -91,15 +91,15 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     steps:
       - name: Download calculator binary
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: calculator
       - name: Download SBOM
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: calculator.spdx.json
       - name: Download provenance
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: ${{ needs.provenance.outputs.provenance-name }}
       - name: Release