KICS scan failed with exit code 40

Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.

Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.

Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service

Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service

Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service

Some modules could end up creating new files on disk with permissions that might be too open or unpredictable

Some modules could end up creating new files on disk with permissions that might be too open or unpredictable

Some modules could end up creating new files on disk with permissions that might be too open or unpredictable

Some modules could end up creating new files on disk with permissions that might be too open or unpredictable