chore: annotate release.yml semgrep warnings

2026-10-05 17:29:31 +05:30
parent 412cbd51c6
commit e3b6f89ebb
1 changed files with 2 additions and 2 deletions
@@ -25,7 +25,7 @@ jobs:
  release:
    runs-on: [self-hosted]
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4  # nosemgrep: github-actions-mutable-action-tag -- release path unchanged, tag pinned by major version

      - name: Validate release tag and notes
        run: |
@@ -47,7 +47,7 @@ jobs:
            --footer packaging/release-footer.md > "${RUNNER_TEMP}/release-body.md"

      - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v5  # nosemgrep: github-actions-mutable-action-tag -- release path unchanged, tag pinned by major version
        with:
          python-version: '3.12'