🔄 Preview: chore(deps): bump the github-actions group with 4 updates - #2806
Closed
probelabs[bot] wants to merge 481 commits into
Closed
🔄 Preview: chore(deps): bump the github-actions group with 4 updates#2806probelabs[bot] wants to merge 481 commits into
probelabs[bot] wants to merge 481 commits into
probelabs / Visor: architecture
succeeded
Aug 27, 2026 in 19s
✅ Check Passed (Warnings Found)
architecture check passed. Found 1 warning, but fail_if condition was not met.
Details
📊 Summary
- Total Issues: 1
- Warning Issues: 1
🔍 Failure Condition Results
Passed Conditions
- global_fail_if: Condition passed
Issues by Category
Architecture (1)
⚠️ .github/workflows/visor.yaml:18 - Theactions/checkoutaction is updated to use a floating tag (@v7), while all other workflows modified in this PR pin the same action to a specific commit hash (@3d3c42e...). Using floating tags can introduce unexpected changes or breakages if the tag is updated. For better security and reproducibility, all actions should be pinned to a specific commit hash, maintaining consistency across the repository's workflows.
Powered by Visor from Probelabs
💡 TIP: You can chat with Visor using /visor ask <your question>
Annotations
Check warning on line 18 in .github/workflows/visor.yaml
probelabs / Visor: architecture
architecture Issue
The `actions/checkout` action is updated to use a floating tag (`@v7`), while all other workflows modified in this PR pin the same action to a specific commit hash (`@3d3c42e...`). Using floating tags can introduce unexpected changes or breakages if the tag is updated. For better security and reproducibility, all actions should be pinned to a specific commit hash, maintaining consistency across the repository's workflows.
Raw output
To ensure consistency and improve security, pin the `actions/checkout` action to the same commit hash used in the other workflow files updated in this pull request.
Loading