Use commit SHA pinning for action metadata files

Signed-off-by: Taiki Ono <taiki@finatext.com>
This commit is contained in:
Taiki Ono 2025-08-26 18:06:07 +09:00
parent 786af10ed4
commit e2183f94f7
No known key found for this signature in database
GPG key ID: 00192FBF2928B617

View file

@ -33,7 +33,7 @@ runs:
INPUT_SCANNERVERSION: ${{ inputs.scannerVersion }}
- name: Load Sonar Scanner CLI from cache
id: sonar-scanner-cli
uses: actions/cache@v4
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
env:
# The default value is 60mins. Reaching timeout is treated the same as a cache miss.
SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1