chore(deps): update github artifact actions

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/go-ossf-slsa3-publish.yml

@@ -135,73 +135,73 @@ jobs:
 
       - name: Download todos-linux-amd64
         id: download-linux-amd64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-amd64
 
       - name: Download todos-linux-amd64.intoto.jsonl
         id: download-linux-amd64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-amd64.intoto.jsonl
 
       - name: Download todos-linux-arm64
         id: download-linux-arm64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-arm64
 
       - name: Download todos-linux-arm64.intoto.jsonl
         id: download-linux-arm64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-arm64.intoto.jsonl
 
       - name: Download todos-darwin-amd64
         id: download-darwin-amd64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-darwin-amd64
 
       - name: Download todos-darwin-amd64.intoto.jsonl
         id: download-darwin-amd64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-darwin-amd64.intoto.jsonl
 
       - name: Download todos-darwin-arm64
         id: download-darwin-arm64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-darwin-arm64
 
       - name: Download todos-darwin-arm64.intoto.jsonl
         id: download-darwin-arm64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-darwin-arm64.intoto.jsonl
 
       - name: Download todos-windows-amd64.exe
         id: download-windows-amd64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-windows-amd64.exe
 
       - name: Download todos-windows-amd64.exe.intoto.jsonl
         id: download-windows-amd64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-windows-amd64.exe.intoto.jsonl
 
       - name: Download todos-windows-arm64.exe
         id: download-windows-arm64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-windows-arm64.exe
 
       - name: Download todos-windows-arm64.exe.intoto.jsonl
         id: download-windows-arm64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-windows-arm64.exe.intoto.jsonl
 
@@ -285,25 +285,25 @@ jobs:
 
       - name: Download todos-linux-amd64
         id: download-linux-amd64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-amd64
 
       - name: Download todos-linux-amd64.intoto.jsonl
         id: download-linux-amd64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-amd64.intoto.jsonl
 
       - name: Download todos-linux-arm64
         id: download-linux-arm64
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-arm64
 
       - name: Download todos-linux-arm64.intoto.jsonl
         id: download-linux-arm64-provenance
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: todos-linux-arm64.intoto.jsonl
 

.github/workflows/schedule.scorecard.yml

@@ -68,7 +68,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif

.github/workflows/workflow_call.zizmor.yml

@@ -46,7 +46,7 @@ jobs:
         run: make zizmor
 
       - name: Upload artifact
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: zizmor.sarif.json