From b001f4df8c69cf39704c7462960446a1a9a68847 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 22:08:17 +0000 Subject: [PATCH] ci: bump actions/download-artifact from 8.0.1 to 8.0.2 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/attest-release.yml | 4 ++-- .github/workflows/reusable-attest-scan.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/attest-release.yml b/.github/workflows/attest-release.yml index 1110a44..594cdbe 100644 --- a/.github/workflows/attest-release.yml +++ b/.github/workflows/attest-release.yml @@ -225,7 +225,7 @@ jobs: attestations: read steps: - name: Download build artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: release-assets @@ -279,7 +279,7 @@ jobs: contents: read # release creation uses the release App token, not GITHUB_TOKEN steps: - name: Download build artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: release-assets diff --git a/.github/workflows/reusable-attest-scan.yml b/.github/workflows/reusable-attest-scan.yml index 9e4e30c..d6e17f2 100644 --- a/.github/workflows/reusable-attest-scan.yml +++ b/.github/workflows/reusable-attest-scan.yml @@ -70,7 +70,7 @@ jobs: contents: read steps: - name: Download evidence artifact - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: ${{ inputs.predicate-artifact }} path: predicate