From b8003dc5522ffee3a8d1803e9674dffe76ec5dfa Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 18 May 2026 10:28:23 +0100 Subject: [PATCH 1/3] fix(ci): pin upload-artifact to valid SHA (Refs standards#48) --- file-soup/.github/workflows/hypatia-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/file-soup/.github/workflows/hypatia-scan.yml b/file-soup/.github/workflows/hypatia-scan.yml index f2bf132..e16e191 100644 --- a/file-soup/.github/workflows/hypatia-scan.yml +++ b/file-soup/.github/workflows/hypatia-scan.yml @@ -75,7 +75,7 @@ jobs: echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY - name: Upload findings artifact - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json From 2a1a3f1ca1f9abbb57334a12b1cf0e59fb2f7e02 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 18 May 2026 10:28:25 +0100 Subject: [PATCH 2/3] fix(ci): pin upload-artifact to valid SHA (Refs standards#48) --- fslint-plugin-api/.github/workflows/hypatia-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fslint-plugin-api/.github/workflows/hypatia-scan.yml b/fslint-plugin-api/.github/workflows/hypatia-scan.yml index f2bf132..e16e191 100644 --- a/fslint-plugin-api/.github/workflows/hypatia-scan.yml +++ b/fslint-plugin-api/.github/workflows/hypatia-scan.yml @@ -75,7 +75,7 @@ jobs: echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY - name: Upload findings artifact - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json From a3af9c71aab20445cb5ef7cc2026be455cb28bb6 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 18 May 2026 10:28:26 +0100 Subject: [PATCH 3/3] fix(ci): pin upload-artifact to valid SHA (Refs standards#48) --- fslint-plugin-sdk/.github/workflows/hypatia-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fslint-plugin-sdk/.github/workflows/hypatia-scan.yml b/fslint-plugin-sdk/.github/workflows/hypatia-scan.yml index f2bf132..e16e191 100644 --- a/fslint-plugin-sdk/.github/workflows/hypatia-scan.yml +++ b/fslint-plugin-sdk/.github/workflows/hypatia-scan.yml @@ -75,7 +75,7 @@ jobs: echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY - name: Upload findings artifact - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json