Set download-artifact version to 4.1.8

Fix CVE-2024-42471
arey · Sep 4, 2024 · d2d94b4 · d2d94b4
1 parent bc3f90a
commit d2d94b4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -52,7 +52,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/[email protected]
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4.1.8
         name: Download benchmarks
         with:
           pattern: benchmark_results_*