CI: Pin scientific-python/upload-nightly-action to release sha (#8662)

* For security best practices, use the action from known commit shas that correspond to tagged releases. These can be updated via dependabot.
pydata · Jan 24, 2024 · 037a39e · 037a39e
1 parent d639d6e
commit 037a39e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/nightly-wheels.yml b/.github/workflows/nightly-wheels.yml
@@ -38,7 +38,7 @@ jobs:
           fi
 
       - name: Upload wheel
-        uses: scientific-python/upload-nightly-action@main
+        uses: scientific-python/upload-nightly-action@6e9304f7a3a5501c6f98351537493ec898728299 # 0.3.0
         with:
           anaconda_nightly_upload_token: ${{ secrets.ANACONDA_NIGHTLY }}
           artifacts_path: dist