update: gh action as pinned dependency as OpenSSF scorecard suggests (#…

…2730) Signed-off-by: Sandor Szücs <sandor.szuecs@zalando.de>
zalando · Nov 10, 2023 · 5a73ff4 · 5a73ff4
1 parent c21cde1
commit 5a73ff4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/master.yaml b/.github/workflows/master.yaml
@@ -31,7 +31,7 @@ jobs:
       - name: Convert coverage to lcov
         uses: jandelgado/gcov2lcov-action@c680c0f7c7442485f1749eb2a13e54a686e76eb5
       - name: Coveralls
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@3dfc5567390f6fa9267c0ee9c251e4c8c3f18949
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: coverage.lcov