chore(deps): update koki-develop/ghasec-action action to v1.1.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
koki-develop/ghasec-action	action	minor	v1.0.2 → v1.1.1

---

Release Notes

koki-develop/ghasec-action (koki-develop/ghasec-action)

v1.1.1

Compare Source

Patches

• Update action pin hashes to v1.0.1 (bfa138f)

v1.1.0

Compare Source

Features

• Add install-shellcheck input to install ShellCheck (346e0e2)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

v1.1.0 — New Feature

• Added optional install-shellcheck input (boolean, default: true) that automatically installs ShellCheck via setup-shellcheck before running ghasec. This enables the shellcheck rule to run without requiring ShellCheck to be pre-installed in the runner.

v1.1.1 — Maintenance

• Updated internal action pin hashes to v1.0.1 (dependency security hygiene). No functional changes.

Breaking Changes: None. All existing inputs (version, github-token, online, args) are preserved and backward-compatible.

🎯 Impact Scope Investigation

Usage location: .github/workflows/ghasec.yml — the only file using this action.

Current invocation:

uses: koki-develop/ghasec-action@16864d583b1146b22219d2e41b44e2d1f3f1357f # v1.0.2
with:
  github-token: ${{ github.token }}
  online: true

Behavioral delta: The new install-shellcheck input defaults to true, meaning ShellCheck will now be auto-installed before ghasec runs. Previously (v1.0.2), if ShellCheck was absent the shellcheck rule was silently skipped with a hint. After this update, ShellCheck will be installed and the rule will actively run.

This is an improvement in security coverage, not a regression. The existing github-token and online inputs are unaffected.

No other files reference this action. No dependency graph impact.

💡 Recommended Actions

• No code or configuration changes required.
• The PR is ready to merge as-is.
• Optionally, you may explicitly set install-shellcheck: false in the workflow if you want to opt out of auto-installing ShellCheck and preserve the v1.0.2 skip-on-absence behavior — but this is not necessary.

🔗 Reference Links

• v1.1.1 Release Notes
• v1.1.0 Release Notes
• v1.0.2...v1.1.1 Diff
• action.yml @ v1.1.1

Generated by koki-develop/claude-renovate-review