code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

code injection via template expansion: may expand into attacker-controllable code

Found 17 findings for mandatory checks that must always succeed.

release.yml:108: unpinned action reference: action is not pinned to a hash (required by blanket policy)

release.yml:53: unpinned action reference: action is not pinned to a hash (required by blanket policy)

release.yml:46: unpinned action reference: action is not pinned to a hash (required by blanket policy)

release.yml:26: unpinned action reference: action is not pinned to a hash (required by blanket policy)

release.yml:20: unpinned action reference: action is not pinned to a hash (required by blanket policy)

release.yml:17: unpinned action reference: action is not pinned to a hash (required by blanket policy)

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/