Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Jan 6, 2026

The zizmor audit detected a version comment mismatch in action.yml where commit 4f9c58a26940a15fb039e4065c63cc11467ab224 was tagged as # v1 but actually points to v1.7.3 in PSModule/GitHub-Script.

Changes

  • Updated version comment on line 37 from # v1 to # v1.7.3 to match the actual tag
- uses: PSModule/GitHub-Script@4f9c58a26940a15fb039e4065c63cc11467ab224 # v1
+ uses: PSModule/GitHub-Script@4f9c58a26940a15fb039e4065c63cc11467ab224 # v1.7.3

This resolves the ref-version-mismatch audit warning and accurately documents the pinned version.

Original prompt

Fix this please:

warning[ref-version-mismatch]: detects commit SHAs that don't match their version comment tags
--> /github/workspace/action.yml:37:79
|
37 | uses: PSModule/GitHub-Script@4f9c58a # v1
| --------------------------------------------------------------------- ^^ points to commit 8b9d2739d689
| |
| is pointed to by tag v1.7.3
|
= note: audit confidence → High
= note: this finding has an auto-fix
= help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix warning for ref version mismatch in action.yml Fix ref-version-mismatch: align commit SHA comment with actual tag Jan 6, 2026
Copilot AI requested a review from MariusStorhaug January 6, 2026 23:02
@MariusStorhaug MariusStorhaug marked this pull request as ready for review January 6, 2026 23:17
@MariusStorhaug
Copy link
Member

Was fixed in another PR.

@MariusStorhaug MariusStorhaug deleted the copilot/fix-ref-version-mismatch branch January 7, 2026 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants