From bc5e4758f581dd6df1c13a57a7706bbace45d365 Mon Sep 17 00:00:00 2001
From: Jonas Zeiger <jonas@giantswarm.io>
Date: Wed, 11 Dec 2024 11:34:51 +0100
Subject: [PATCH] upload-artifact, download-artifact: explicitly use v4

---
 .github/workflows/build_and_test.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build_and_test.yaml b/.github/workflows/build_and_test.yaml
index 121c4ff..f272cdd 100644
--- a/.github/workflows/build_and_test.yaml
+++ b/.github/workflows/build_and_test.yaml
@@ -11,7 +11,7 @@ jobs:
       - name: Build Library
         run: make lib
       - name: Upload Artifacts
-        uses: actions/upload-artifact@master
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: lib-output
           path: lib-output
@@ -50,7 +50,7 @@ jobs:
       - name: Install Dependencies
         run: npm ci
       - name: Download Artifacts
-        uses: actions/download-artifact@master
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16  # v4.1.8
         with:
           name: lib-output
           path: lib-output