From 5bfcf8d61bea5ae754c873c779e82dabddf8cdb9 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 28 Mar 2026 03:16:43 +0000
Subject: [PATCH 1/2] Initial plan


From 06269f4e12a36e53cf42b0abd76e5586505a4d75 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 28 Mar 2026 03:21:25 +0000
Subject: [PATCH 2/2] Create copilot-setup-steps workflow with pinned action
 SHAs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fix CI failure (job 68979732486): create the missing workflow file with
all three actions pinned to full commit SHAs instead of tags/branches.

- actions/checkout@v6 → de0fac2e4500dabe0009e67214ff5f5447ce83dd
- actions/setup-node@v6 → 53b83947a5a98c8d113130e565377fae1a50d02f
- setup-codeql-environment@main → de78423de19152f49ed45d1df6e7b70f721132c8

Agent-Logs-Url: https://github.com/advanced-security/codeql-sap-js/sessions/2b94b4ac-d715-4991-8ac1-9135642e433d

Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>
---
 .github/workflows/copilot-setup-steps.yml | 36 +++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 .github/workflows/copilot-setup-steps.yml

diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
new file mode 100644
index 000000000..5c84b0f79
--- /dev/null
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -0,0 +1,36 @@
+name: Copilot Setup Steps
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  copilot-setup-steps:
+    name: Copilot Setup Steps
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Setup - Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup - Set up Node.js
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: 'extractors/cds/tools/package-lock.json'
+
+      - name: Setup - Install CDS extractor dependencies
+        working-directory: extractors/cds/tools
+        run: npm ci
+
+      - name: Setup - Generate .codeql-version from qlt.conf.json
+        run: |
+          CODEQL_VERSION=$(jq -r '.CodeQLCLI' qlt.conf.json)
+          echo "v${CODEQL_VERSION}" > .codeql-version
+          echo "Generated .codeql-version: $(cat .codeql-version)"
+
+      - name: Setup - Set up CodeQL environment
+        uses: advanced-security/codeql-development-mcp-server/.github/actions/setup-codeql-environment@de78423de19152f49ed45d1df6e7b70f721132c8 # main