Fix guardrail-audit-alert operation · Framework-R-D/action-setup-build-env@214dbe5

Triggered via push June 17, 2026 17:14

main

Status Failure

Total duration 1m 4s

Artifacts –

ci.yaml

on: push

4 errors and 4 warnings

❌ [actionlint] The command ran successfully and some problem was found (found 3 errors, linted 3 files), exit code: 1

actionlint: .github/workflows/guardrail-audit-alert.yaml#L15

"github.event.head_commit.message" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/reference/security/secure-use#good-practices-for-mitigating-script-injection-attacks for more details

actionlint: .github/workflows/guardrail-audit-alert.yaml#L15

shellcheck reported issue in this script: SC2016:info:4:92: Expressions don't expand in single quotes, use double quotes for that

actionlint: .github/workflows/guardrail-audit-alert.yaml#L15

shellcheck reported issue in this script: SC2016:info:4:127: Expressions don't expand in single quotes, use double quotes for that

yaml-check: ./.github/workflows/ci.yaml#L67

67:121 [line-length] line too long (147 > 120 characters)

yaml-check: ./.github/workflows/ci.yaml#L3

3:1 [truthy] truthy value should be one of [false, true]

yaml-check: ./.github/workflows/guardrail-audit-alert.yaml#L19

19:121 [line-length] line too long (196 > 120 characters)

yaml-check: ./.github/workflows/guardrail-audit-alert.yaml#L2

2:1 [truthy] truthy value should be one of [false, true]