From 1a6d90ebcb0e6a6b1d87e37ba693fe453195ae25 Mon Sep 17 00:00:00 2001
From: Daan Timmer <8293597+daantimmer@users.noreply.github.com>
Date: Thu, 28 Aug 2025 12:18:32 +0200
Subject: [PATCH] SQSCANGHA-102 Pin actions/cache to a full-length commit SHA
 (#199)

---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 8bc664e..1784c4c 100644
--- a/action.yml
+++ b/action.yml
@@ -33,7 +33,7 @@ runs:
         INPUT_SCANNERVERSION: ${{ inputs.scannerVersion }}
     - name: Load Sonar Scanner CLI from cache
       id: sonar-scanner-cli
-      uses: actions/cache@v4
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 #v4.2.4
       env:
         # The default value is 60mins. Reaching timeout is treated the same as a cache miss.
         SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1