Pin coverallsapp/github-action

Author: aivus

.github/workflows/node.js.yml

@@ -39,7 +39,7 @@ jobs:
         if: ${{ matrix.node-version == '24' && matrix.os == 'ubuntu-latest' }}
       - name: Coveralls
         if: ${{ matrix.node-version == '24' && matrix.os == 'ubuntu-latest' }}
-        uses: coverallsapp/github-action@v2
+        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Publish Qlty code coverage