chore(deps): update actions/setup-go action to v7#213

Open

renovate[bot] wants to merge 1 commit into

mainfrom

renovate/actions-setup-go-7.x

GitHub Advanced Security / Semgrep OSS succeeded Jul 16, 2026 in 4s

2 new alerts

New alerts in code changed by this pull request

2 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 44 in .github/workflows/main.yml

Code scanning / Semgrep OSS

Semgrep Finding: yaml.github-actions.security.github-actions-mutable-action-tag.github-actions-mutable-action-tag Warning

GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608.

Check warning on line 28 in .github/workflows/release.yaml

Code scanning / Semgrep OSS

Semgrep Finding: yaml.github-actions.security.github-actions-mutable-action-tag.github-actions-mutable-action-tag Warning

GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608.