Skip to content

ci: bump actions/upload-artifact SHA to current v4#2

Merged
hyperpolymath merged 1 commit into
mainfrom
ci/bump-upload-artifact-v4-sha-final
May 12, 2026
Merged

ci: bump actions/upload-artifact SHA to current v4#2
hyperpolymath merged 1 commit into
mainfrom
ci/bump-upload-artifact-v4-sha-final

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Final-round sweep of upload-artifact v4 SHA fix. Tracked in hyperpolymath/hypatia#213.

@hyperpolymath
hyperpolymath merged commit a36e890 into main May 12, 2026
7 checks passed
@hyperpolymath
hyperpolymath deleted the ci/bump-upload-artifact-v4-sha-final branch May 12, 2026 23:42
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/upload-artifact ea165f8d65b6e75b540449e92b4886f43607fa02 🟢 5.6
Details
CheckScoreReason
Code-Review🟢 8Found 8/9 approved changesets -- score normalized to 8
Maintained🟢 66 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 6
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection⚠️ 0branch protection not enabled on development/release branches

Scanned Manifest Files

.github/workflows/hypatia-scan.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant