also looking at this

chore(ci): pin artifact download action

#315

Merged glennmichael123 wants to merge codex/pin-artifact-download into main

3 files +5 -2

glennmichael123 9 days ago

Pin the SBOM and release artifact-download steps to the verified upstream v4.3.0 commit. Add a workflow test so both references stay aligned.

Checks: release workflow tests, Pickier, actionlint.

3 changed files on the files tab, with 0 review threads.