Skip to content

Conversation

@chainchad
Copy link
Collaborator

No description provided.


- name: Validate go.mod
uses: smartcontractkit/.github/apps/go-mod-validator@go-mod-validator/v1
uses: smartcontractkit/.github/apps/go-mod-validator@dx-2266/go-mod-validator-fix # TODO

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Validate Go Mod Files' step
Uses Step
uses 'smartcontractkit/.github/apps/go-mod-validator' with ref 'dx-2266/go-mod-validator-fix', not a pinned commit hash
@chainchad chainchad closed this Oct 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant