Improve link checker workflow security and consistency

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

.github/workflows/check-links.yml

@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Check links with lychee
-        uses: lycheeverse/lychee-action@v2
+        uses: lycheeverse/lychee-action@2b973e86fc5181cd4fdfd5829efc58d4dd49a2c4 # v2.0.2
         with:
           # Scan all markdown and MDX files in content directory, plus root README
           args: >-
@@ -33,17 +33,18 @@ jobs:
             'README.md'
           # Fail the job if broken links are found
           fail: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Create Issue on Failure
         if: failure()
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
-            const output = process.env.LYCHEE_OUTPUT || 'Link check failed';
             github.rest.issues.create({
               owner: context.repo.owner,
               repo: context.repo.repo,
               title: '🔗 Broken links detected in documentation',
-              body: `Link checker found broken links in the documentation.\n\nPlease review the [workflow run](${context.payload.repository.html_url}/actions/runs/${context.runId}) for details.\n\n${output}`,
+              body: `Link checker found broken links in the documentation.\n\nPlease review the [workflow run](${context.payload.repository.html_url}/actions/runs/${context.runId}) for details.`,
               labels: ['documentation', 'bug']
             });

.lycheeignore

@@ -11,7 +11,7 @@ https://example.org
 http://example.com
 http://example.org
 
-# Social media (防止反爬虫机制误报)
+# Social media (prevents anti-bot false positives)
 https://twitter.com*
 https://x.com*