From 75ca5d24e6f70fb83195e480821c0a9d27f44a87 Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Mon, 18 May 2026 10:30:03 +0100
Subject: [PATCH] fix(ci): pin upload-artifact to valid SHA (Refs standards#48)

---
 alkahest-shell-transmuter/.github/workflows/hypatia-scan.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/alkahest-shell-transmuter/.github/workflows/hypatia-scan.yml b/alkahest-shell-transmuter/.github/workflows/hypatia-scan.yml
index f2bf132..e16e191 100644
--- a/alkahest-shell-transmuter/.github/workflows/hypatia-scan.yml
+++ b/alkahest-shell-transmuter/.github/workflows/hypatia-scan.yml
@@ -75,7 +75,7 @@ jobs:
           echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
 
       - name: Upload findings artifact
-        uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: hypatia-findings
           path: hypatia-findings.json