Github are idiots. A workflow that uses download-artifact@v4 should n…

…ot be vulnerable to a security oopsie in version 4.1.6, because it should use the latest version, which is 4.1.8. This commit exists solely to shut their stupid dependabot up and stop it whining about non-existent problems
DrHyde · Oct 2, 2024 · ed66f90 · ed66f90
1 parent 9c0d9f0
commit ed66f90
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4.1.8
         with:
           name: dist-for-freebsd-install
       - name: Install on FreeBSD

diff --git a/.github/workflows/install-linux.yml b/.github/workflows/install-linux.yml
@@ -29,7 +29,7 @@ jobs:
     container:
       image: perl:5.34
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4.1.8
         with:
           name: dist-for-linux-install
       - name: Install on Linux

diff --git a/.github/workflows/openbsd.yml b/.github/workflows/openbsd.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4.1.8
         with:
           name: dist-for-openbsd-install
       - name: Install on OpenBSD

diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
@@ -38,7 +38,7 @@ jobs:
         with:
           distribution: strawberry
           perl-version: ${{ matrix.perl-version }}
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4.1.8
         with:
           name: dist-for-windows-install
       - name: Install on Windows