From e2183f94f772fd13a28ffb4c9cbb42237b0e8cc2 Mon Sep 17 00:00:00 2001
From: Taiki Ono <taiki@finatext.com>
Date: Tue, 26 Aug 2025 18:06:07 +0900
Subject: [PATCH] Use commit SHA pinning for action metadata files

Signed-off-by: Taiki Ono <taiki@finatext.com>
---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 39b39f2..6c18baa 100644
--- a/action.yml
+++ b/action.yml
@@ -33,7 +33,7 @@ runs:
         INPUT_SCANNERVERSION: ${{ inputs.scannerVersion }}
     - name: Load Sonar Scanner CLI from cache
       id: sonar-scanner-cli
-      uses: actions/cache@v4
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       env:
         # The default value is 60mins. Reaching timeout is treated the same as a cache miss.
         SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1