Evan e06720b067 chore(ci): correct codeql-action version comment to match pinned SHA ...

The github/codeql-action/init and analyze steps were pinned to SHA
8aad20d150bbac5944a9f9d289da16a4b0d87c1e but annotated with a '# v4'
comment. That SHA is the v4.36.2 release, and the moving 'v4' tag now
resolves to a different commit, so zizmor's ref-version-mismatch rule
flags the comment as untruthful. Update the comment to '# v4.36.2' to
reflect the actual pinned ref, matching how other actions in this
workflow annotate their exact versions (e.g. actions/checkout # v7.0.0).

Resolves code-scanning alert #2560

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-02 10:34:36 -07:00

2.8 KiB

Raw Blame History

View Raw