[CI/CD Security] fluttercandies/flutter_wechat_picker_library - Issue Report

[github-actions]

📦 fluttercandies/flutter_wechat_picker_library

📌 Commit SHA: c6963f974b30723cc9989f4b093c2e23fd3704e5

🕜 Report generated at: 2026-09-02T06:37:36.178Z

🔍 Overview

Severity	Count
🟢 Low	2

📁 Details

📄 .github/workflows/codeql.yml - 🟢Low(1)

1	Severity	Audit Rule	Confidence
	🟢 Low	stale-action-refs	High
Audit: commit hash does not point to a Git tag: this step Remediation: view audit

• .github/workflows/codeql.yml#L53
  Audit: this step

  actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231

---

📄 .github/workflows/runnable.yml - 🟢Low(1)

1	Severity	Audit Rule	Confidence
	🟢 Low	stale-action-refs	High
Audit: commit hash does not point to a Git tag: this step Remediation: view audit

• .github/workflows/runnable.yml#L39
  Audit: this step

  flutter-actions/setup-flutter@18c66a64fb6f6d3338c63cabbc5cd6da395e7f1d

---