From 931abc0276e0698be614bcb5697c2e318fb8c108 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 23 Apr 2026 02:14:57 +0000 Subject: [PATCH] fix(ci): correct setup-rust version comments to match pinned hash The pinned hash d286d43bc1f606abbd98096666ff8be68c8d5f57 is tag v1.0.2, not v1.0.0 as the comments claimed. Zizmor's ref-version-mismatch audit flags this at medium severity, which fails the Security Analysis workflow. --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 137b4b50..8311ffd2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -52,7 +52,7 @@ jobs: persist-credentials: false submodules: true - - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.0 + - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.2 with: save-cache: ${{ github.ref_name == 'main' }} cache-key: clippy @@ -107,7 +107,7 @@ jobs: CARGO_HOME,{{ DEV_DRIVE }}/.cargo RUSTUP_HOME,{{ DEV_DRIVE }}/.rustup - - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.0 + - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.2 with: save-cache: ${{ github.ref_name == 'main' }} cache-key: test @@ -220,7 +220,7 @@ jobs: persist-credentials: false submodules: true - - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.0 + - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.2 with: save-cache: ${{ github.ref_name == 'main' }} cache-key: fmt