Skip to content

chore: align setup-node version annotation with pinned SHA#48

Merged
danielroe merged 2 commits into
mainfrom
copilot/fix-code-scanning-alerts
Jul 17, 2026
Merged

chore: align setup-node version annotation with pinned SHA#48
danielroe merged 2 commits into
mainfrom
copilot/fix-code-scanning-alerts

Conversation

Copilot AI commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

This PR addresses code scanning alert #5 (zizmor ref-version-mismatch) in the repository workflow configuration. The pinned actions/setup-node commit was correct, but its inline version annotation was stale.

  • Alert remediation

    • Updated .github/workflows/ci.yml to make the annotated version match the pinned actions/setup-node SHA.
    • Scope is intentionally minimal: one-line metadata correction, no workflow logic changes.
  • Result

    • Removes the ref/version inconsistency that triggered scanning noise while preserving SHA pinning.
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0

Copilot AI changed the title [WIP] Fix code scanning alert #5 Align setup-node version annotation with pinned SHA in CI workflow Jul 17, 2026
Copilot AI requested a review from danielroe July 17, 2026 09:24
@danielroe
danielroe marked this pull request as ready for review July 17, 2026 09:31
@danielroe danielroe changed the title Align setup-node version annotation with pinned SHA in CI workflow chore: align setup-node version annotation with pinned SHA Jul 17, 2026
@danielroe
danielroe merged commit cb3b764 into main Jul 17, 2026
8 checks passed
@danielroe
danielroe deleted the copilot/fix-code-scanning-alerts branch July 17, 2026 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants