From b4e53533906f5bfc4f0eb15e1d2b0cc4ec0690e7 Mon Sep 17 00:00:00 2001
From: Abhijeet V <abhijeet.v@hashicorp.com>
Date: Tue, 20 May 2025 13:14:46 +0530
Subject: [PATCH] pin reused github action

Close security alert #24.
Close SECVULN-22923
---
 .github/workflows/golangci.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/golangci.yml b/.github/workflows/golangci.yml
index 7a2c7f2..59e98db 100644
--- a/.github/workflows/golangci.yml
+++ b/.github/workflows/golangci.yml
@@ -87,7 +87,8 @@ jobs:
           version: latest
           args: release --clean --skip=publish --snapshot
 
-      - uses: actions/upload-artifact@v4
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
         with:
           name: copywrite
           path: dist/*