[CI/CD Security] fluttercandies/flutter_wechat_assets_picker - Issue Report

[github-actions]

📦 fluttercandies/flutter_wechat_assets_picker

📌 Commit SHA: 460a9076696b8a0ab8f8e67d3ce8f29ca83799f3

🕜 Report generated at: 2026-09-02T06:37:37.551Z

🔍 Overview

Severity	Count
🟢 Low	4

📁 Details

📄 .github/workflows/codeql.yml - 🟢Low(1)

1	Severity	Audit Rule	Confidence
	🟢 Low	stale-action-refs	High
Audit: commit hash does not point to a Git tag: this step Remediation: view audit

• .github/workflows/codeql.yml#L53
  Audit: this step

  actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231

---

📄 .github/workflows/runnable.yml - 🟢Low(3)

1	Severity	Audit Rule	Confidence
	🟢 Low	stale-action-refs	High
Audit: commit hash does not point to a Git tag: this step Remediation: view audit

• .github/workflows/runnable.yml#L37
  Audit: this step

  flutter-actions/setup-flutter@18c66a64fb6f6d3338c63cabbc5cd6da395e7f1d

---

2	Severity	Audit Rule	Confidence
	🟢 Low	stale-action-refs	High
Audit: commit hash does not point to a Git tag: this step Remediation: view audit

• .github/workflows/runnable.yml#L80
  Audit: this step

  flutter-actions/setup-flutter@18c66a64fb6f6d3338c63cabbc5cd6da395e7f1d

---

3	Severity	Audit Rule	Confidence
	🟢 Low	stale-action-refs	High
Audit: commit hash does not point to a Git tag: this step Remediation: view audit

• .github/workflows/runnable.yml#L104
  Audit: this step

  flutter-actions/setup-flutter@18c66a64fb6f6d3338c63cabbc5cd6da395e7f1d

---