From 0e2a911727c2200b18d7497a936b6db4b5523808 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 04:55:48 +0000
Subject: [PATCH] Update GitHub Artifact Actions

---
 .github/workflows/scorecard.yml     | 2 +-
 .github/workflows/tf-plan-apply.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 10dbad56..2a363d4d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -54,7 +54,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/tf-plan-apply.yml b/.github/workflows/tf-plan-apply.yml
index 13f0d931..4c3c3f4c 100644
--- a/.github/workflows/tf-plan-apply.yml
+++ b/.github/workflows/tf-plan-apply.yml
@@ -34,7 +34,7 @@ jobs:
         id: plan
         run: "cd tf\nset +e\nnix shell --inputs-from . nixpkgs#opentofu --command tofu plan -var \"repo=$GITHUB_REPOSITORY\" -detailed-exitcode -out tfplan\nexport exitcode=$?\nset -e\necho \"exitcode=$exitcode\" >> \"$GITHUB_OUTPUT\"\nif [ $exitcode -eq 1 ]; then\n  exit 1\nelse \n  exit 0\nfi\n"
       - name: Publish plan
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: tfplan
           path: tf/tfplan
@@ -52,7 +52,7 @@ jobs:
           role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT_ID }}:role/apply
           aws-region: ${{ vars.AWS_REGION }}
       - name: Download plan
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: tfplan
           path: tf