From 8ae419b5bbb3d7b6d1fafff4d52bb590309010a9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Aug 2026 21:19:43 +0000
Subject: [PATCH] Bump actions/upload-artifact from 4.6.1 to 7.0.1

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.6.1...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/docker-cis-harden.yml        | 2 +-
 .github/workflows/docker-install.yml           | 2 +-
 .github/workflows/dotnet.yml                   | 2 +-
 .github/workflows/grype.yml                    | 2 +-
 .github/workflows/infrastructure-hardening.yml | 2 +-
 .github/workflows/scorecard.yml                | 2 +-
 .github/workflows/syft.yml                     | 2 +-
 .github/workflows/trivy-sca.yml                | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/docker-cis-harden.yml b/.github/workflows/docker-cis-harden.yml
index 688d18c..6cec67b 100644
--- a/.github/workflows/docker-cis-harden.yml
+++ b/.github/workflows/docker-cis-harden.yml
@@ -135,7 +135,7 @@ jobs:
 
       - name: Upload InSpec reports
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: inspec-docker-harden-reports
           path: |
diff --git a/.github/workflows/docker-install.yml b/.github/workflows/docker-install.yml
index b8b4c9e..5197cb1 100644
--- a/.github/workflows/docker-install.yml
+++ b/.github/workflows/docker-install.yml
@@ -124,7 +124,7 @@ jobs:
 
       - name: Upload InSpec reports
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: inspec-docker-install-reports
           path: |
diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index 759b3ed..a115167 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -63,7 +63,7 @@ jobs:
         run: docker save ${{ steps.meta.outputs.image }} -o image.tar
 
       - name: Upload image artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: docker-image
           path: image.tar
diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml
index 4f6eebc..51d5a34 100644
--- a/.github/workflows/grype.yml
+++ b/.github/workflows/grype.yml
@@ -162,7 +162,7 @@ jobs:
 
       - name: Upload Grype results artifact
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: grype-sca-results
           path: |
diff --git a/.github/workflows/infrastructure-hardening.yml b/.github/workflows/infrastructure-hardening.yml
index cc83b5c..43c5927 100644
--- a/.github/workflows/infrastructure-hardening.yml
+++ b/.github/workflows/infrastructure-hardening.yml
@@ -124,7 +124,7 @@ jobs:
 
       - name: Upload InSpec report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: inspec-linux-baseline
           path: linux-baseline.html
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 6b2da30..437b526 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -69,7 +69,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/syft.yml b/.github/workflows/syft.yml
index ab7bf51..5ee9dc5 100644
--- a/.github/workflows/syft.yml
+++ b/.github/workflows/syft.yml
@@ -66,7 +66,7 @@ jobs:
             -o table
 
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom
           path: |
diff --git a/.github/workflows/trivy-sca.yml b/.github/workflows/trivy-sca.yml
index c150de7..72a5c07 100644
--- a/.github/workflows/trivy-sca.yml
+++ b/.github/workflows/trivy-sca.yml
@@ -117,7 +117,7 @@ jobs:
 
       - name: Upload Trivy SCA artifacts
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: trivy-sca-results
           path: |