From b3eee71084a7aab477ae1855c2329a751a190e30 Mon Sep 17 00:00:00 2001
From: joereyna <joseph.reyna@gmail.com>
Date: Mon, 30 Mar 2026 11:32:40 -0700
Subject: [PATCH] Pin codecov-action to immutable SHA (v5.5.4)

---
 .github/workflows/test-litellm-matrix.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/test-litellm-matrix.yml b/.github/workflows/test-litellm-matrix.yml
index a62193b13a..3344790e47 100644
--- a/.github/workflows/test-litellm-matrix.yml
+++ b/.github/workflows/test-litellm-matrix.yml
@@ -178,7 +178,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: always()
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@aa56896cf108bd10b5eb883cd1d24196da57f695 # v5.5.4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage-${{ matrix.test-group.name }}.xml