Repository navigation
ci(ai-gateway): run GitHub Copilot in the weekly Kimi benchmark - #520
Merged
Merged
Superagent Security / Superagent Supply Chain Scan
completed
Oct 16, 2026 in 13s
Supply chain scan inconclusive
.github/workflows/ai-gateway-benchmarks.yml: action reference actions/checkout@v4 is not an exact commit SHA or release version.
Details
Scan errors
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/checkout@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference pnpm/action-setup@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/setup-node@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference namespacelabs/nscloud-setup@v0 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/upload-artifact@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/github-script@v7 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/checkout@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference pnpm/action-setup@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/setup-node@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference namespacelabs/nscloud-setup@v0 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/upload-artifact@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/github-script@v7 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: only parsed exact dependency pin replacements are supported; other infra edits cannot be verified.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/checkout@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference pnpm/action-setup@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/setup-node@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference namespacelabs/nscloud-setup@v0 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/upload-artifact@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/github-script@v7 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/checkout@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference pnpm/action-setup@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/setup-node@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference namespacelabs/nscloud-setup@v0 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/upload-artifact@v4 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: action reference actions/github-script@v7 is not an exact commit SHA or release version.
- .github/workflows/ai-gateway-benchmarks.yml: only parsed exact dependency pin replacements are supported; other infra edits cannot be verified.
Loading