0.85.4 generated workflows are still not Zizmor compliant

[reggie-k]

Thanks for the quick fix to #50537, but I've just upgraded to the latest 0.85.4 and Zizmor is still unhappy:
https://github.com/argoproj/argo-cd/pull/28940/checks?check_run_id=92542683650
Also, why don't I have permissions to reopen the issue above if it was not resolved?

[pelikhan]

@copilot the checkout command in the copilot-setup-steps needs to be resolved to the latest actions/checkout in the actions pins mapping.
See

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

[pelikhan]

Also, why don't I have permissions to reopen the issue above if it was not resolved?

new issues are more efficient for agents.