ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

CI failed: CodeQL analysis failed because it was configured to analyze JavaScript/TypeScript in a PHP repository, finding no valid source files.

Overview

1 CodeQL failure found across 1 job. The CodeQL analysis workflow attempted to analyze JavaScript/TypeScript source code in a PHP repository, resulting in a fatal configuration error.

Failures

CodeQL JavaScript/TypeScript Analysis Failure (confidence: high)

• Type: configuration
• Affected jobs: 90125748349
• Related to change: yes
• Root cause: The repository is a PHP project (php-aegis), but CodeQL analysis is set to scan javascript-typescript. Since there are no JS/TS files, CodeQL exited with code 32 ("CodeQL could not process any code written in JavaScript").
• Suggested fix: Update the CodeQL workflow language matrix to include php instead of javascript-typescript.

Summary

• Change-related failures: 1 configuration error due to mismatched CodeQL language matrix for a PHP repository.
• Infrastructure/flaky failures: None
• Recommended action: Update the GitHub Actions workflow configuration for CodeQL to target PHP.

Code Review ✅ Approved

Vendors validation scripts and removes remote action pins in the CI workflow to resolve missing action dependencies. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)