From 416d3023ff42e79bb8837912974321d0d605785a Mon Sep 17 00:00:00 2001
From: thorsten <thorsten@PC>
Date: Tue, 29 Sep 2026 16:59:05 +0200
Subject: [PATCH] ci: pin Coveralls action to commit SHA

---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 95e7b33..89695f4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -62,7 +62,7 @@ jobs:
 
       - name: Upload Coverage to Coveralls
         id: coveralls
-        uses: coverallsapp/github-action@v2
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
         # Transient coveralls.io 5xx errors happen; the retry below still fails the build if it persists.
         continue-on-error: true
         with:
@@ -75,7 +75,7 @@ jobs:
 
       - name: Upload Coverage to Coveralls (retry)
         if: steps.coveralls.outcome == 'failure'
-        uses: coverallsapp/github-action@v2
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: TestResults/Reports/lcov.info