Skip to content

Commit 6a35417

Browse files
committed
ci: upgrade action-download-artifact
The current version has an artifact poisoning vulnerability - see https://github.com/TinyTapeout/tinytapeout-10/security/dependabot/2 for details
1 parent 09b69e1 commit 6a35417

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

.github/workflows/efabless_tapeout.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313

1414
steps:
1515
- name: Download artifact
16-
uses: dawidd6/action-download-artifact@v3
16+
uses: dawidd6/action-download-artifact@v6
1717
id: download_artifact
1818
with:
1919
workflow: gds.yaml

.github/workflows/precheck.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
pdk_root: ${{ env.PDK_ROOT }}
3939

4040
- name: Download artifact (run id = ${{ github.event.workflow_run.id }})
41-
uses: dawidd6/action-download-artifact@v3
41+
uses: dawidd6/action-download-artifact@v6
4242
id: download_artifact
4343
with:
4444
workflow: gds.yaml
@@ -122,7 +122,7 @@ jobs:
122122
pdk_root: ${{ env.PDK_ROOT }}
123123

124124
- name: Download artifact (run id = ${{ github.event.workflow_run.id }})
125-
uses: dawidd6/action-download-artifact@v3
125+
uses: dawidd6/action-download-artifact@v6
126126
id: download_artifact
127127
with:
128128
workflow: gds.yaml

0 commit comments

Comments
 (0)