From f6cf374408ba23c4add43ac93016387284b63c2d Mon Sep 17 00:00:00 2001
From: ilyakhd <14272298+IlyaKhD@users.noreply.github.com>
Date: Tue, 8 Sep 2026 12:59:22 +0300
Subject: [PATCH 1/2] feat(repository-check): add support for extra details
 markdown

---
 packages/repository-check/workflow.yml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/packages/repository-check/workflow.yml b/packages/repository-check/workflow.yml
index 7522e9d..0c20a1d 100644
--- a/packages/repository-check/workflow.yml
+++ b/packages/repository-check/workflow.yml
@@ -8,6 +8,11 @@ on:
         description: 'JSON5 configuration object (e.g. { ignoredAdvisories: ["GHSA-..."] })'
         required: false
         default: '{}'
+      extraDetails:
+        type: string
+        description: 'Markdown the repository contributes about itself. Published as extra-details.md in the health-check artifact, which the repository monitor appends to the repository issue body.'
+        required: false
+        default: ''
 
 jobs:
   repo-check:
@@ -44,9 +49,17 @@ jobs:
           artifacts: artifacts
           config: ${{ inputs.config }}
 
+      - name: Add external details
+        if: ${{ inputs.extraDetails != '' }}
+        env:
+          EXTRA_DETAILS: ${{ inputs.extraDetails }}
+        run: printf '%s\n' "$EXTRA_DETAILS" > artifacts/extra-details.md
+
       - name: Upload validation results
         uses: actions/upload-artifact@v4
         with:
           name: health-check
-          path: artifacts/*.json
+          path: |
+            artifacts/*.json
+            artifacts/*.md
           if-no-files-found: error

From 3d7cac9f1932f93bbc9ef33047fc32aa1c9fcc7c Mon Sep 17 00:00:00 2001
From: ilyakhd <14272298+IlyaKhD@users.noreply.github.com>
Date: Tue, 8 Sep 2026 13:05:35 +0300
Subject: [PATCH 2/2] chore(ci): pin actions

---
 packages/repository-check/workflow.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/packages/repository-check/workflow.yml b/packages/repository-check/workflow.yml
index 0c20a1d..42450d7 100644
--- a/packages/repository-check/workflow.yml
+++ b/packages/repository-check/workflow.yml
@@ -20,15 +20,15 @@ jobs:
     runs-on: ubuntu-slim
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: '.node-version'
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
 
       - name: Validate lock files
         uses: DevExpress/github-actions/validate-lock-files@repository-check
@@ -56,7 +56,7 @@ jobs:
         run: printf '%s\n' "$EXTRA_DETAILS" > artifacts/extra-details.md
 
       - name: Upload validation results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: health-check
           path: |