chore(deps): pin sonarsource/sonarcloud-github-action action to 383f7e5

SchweizerischeBundesbahnen · Oct 21, 2024 · d64b5bf · d64b5bf
1 parent 196fee0
commit d64b5bf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/poetry-build.yml b/.github/workflows/poetry-build.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Run tests
         run: poetry run tox
       - name: SonarCloud scan for PR
-        uses: sonarsource/sonarcloud-github-action@v3
+        uses: sonarsource/sonarcloud-github-action@383f7e52eae3ab0510c3cb0e7d9d150bbaeab838 # v3
         if: github.event_name == 'pull_request'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information
@@ -37,7 +37,7 @@ jobs:
             -Dsonar.pullrequest.branch=${{ github.head_ref }}
             -Dsonar.pullrequest.key=${{ github.event.pull_request.number }}
       - name: SonarCloud scan for Push
-        uses: sonarsource/sonarcloud-github-action@v3
+        uses: sonarsource/sonarcloud-github-action@383f7e52eae3ab0510c3cb0e7d9d150bbaeab838 # v3
         if: github.event_name == 'push'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information