[TT-15111] Added visor code review - #408
Merged
Merged
probelabs / Visor: style
succeeded
Sep 23, 2025 in 4m 4s
✅ Check Passed (Warnings Found)
style check passed. Found 1 warning, but fail_if condition was not met.
Details
📊 Summary
- Total Issues: 1
- Warning Issues: 1
🐛 Issues by Category
🎨 Style (1)
⚠️ .github/workflows/visor.yaml:22 - The workflow usesprobelabs/visor@main, which pins the action to themainbranch. It is a security and stability best practice to pin actions to a specific version tag (e.g.,@v1) or a full-length commit SHA. Using a floating reference likemaincan introduce unexpected breaking changes or vulnerabilities into your CI/CD pipeline.
Generated by Visor - AI-powered code review
Annotations
Check warning on line 22 in .github/workflows/visor.yaml
probelabs / Visor: style
style Issue
The workflow uses `probelabs/visor@main`, which pins the action to the `main` branch. It is a security and stability best practice to pin actions to a specific version tag (e.g., `@v1`) or a full-length commit SHA. Using a floating reference like `main` can introduce unexpected breaking changes or vulnerabilities into your CI/CD pipeline.
Raw output
Please check the `probelabs/visor` repository for the latest stable release tag and update the workflow to use a specific version. For example:
```yaml
- uses: probelabs/visor@v1
```
Or pin it to a specific commit SHA for maximum security and immutability.
Loading