No changes needed: workflow findings already resolved
Metadata
Current evaluation
Closed without merge; no changes made. Underlying zizmor findings in #403 were later resolved by #585 (commit f86068e).
Resolution: closed superseded
Reason: PR #473 made no repository changes and was closed. The underlying issue #403 was later resolved by PR #585 (commit f86068e), which pinned actions and replaced softprops/action-gh-release.
Evaluated by: mr-cal-bot
No scores available.
Issue body
The reported tag-only action references and `softprops/action-gh-release` usage are already absent from the current workflows.
- **Action pinning:** `check-renovate.yaml` references actions by full commit SHA.
- **Release publishing:** `release-publish.yaml` creates releases with `gh release`.
No repository changes were made.
<!-- START COPILOT CODING AGENT SUFFIX -->
- Fixes #403
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| ~deepseek/deepseek-pro-latest | — | closed superseded | Closed without merge; no changes made. Underlying zizmor findings in #403 were later resolved by #585 (commit f86068e). |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/imagecraft#403
(confidence 100%)
PR #473 claimed to fix #403 but made no changes.
-
Superseded By:
imagecraft#585
(confidence 90%)
PR #585 resolved the underlying zizmor findings in #403.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #462 ci: Remediate Zizmor findings in GitHub Actions workflows | imagecraft | closed | Closed unmerged; superseded by #585 (f86068e), which already resolved all zizmor findings and conflicts with .github/zizmor.yaml. | |
| #585 fix(ci): resolve all zizmor findings in GitHub workflows | starbase | merged | Merged in canonical/starbase#585 as commit f86068e, hardening GitHub workflows and reducing zizmor findings from 44 to 0; all CI checks passed. |