[gwarf]

The pinned git-auto-commit-action SHA is tag v7.2.0, but upstream released v7.2.1 and moved the floating v7 tag to it, so the # v7 comment no longer matches the pin and zizmor's ref-version-mismatch audit fails MegaLinter. This keeps the pin and names the exact tag it points to; bumping to v7.2.1 is left to Dependabot.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	1		0		0	0.04s
✅ ACTION	zizmor	1	0	0		0	0.96s
✅ REPOSITORY	betterleaks	yes		no		no	1.02s
✅ REPOSITORY	checkov	yes		no		no	16.16s
✅ REPOSITORY	git_diff	yes		no		no	0.06s
✅ REPOSITORY	osv-scanner	yes		no		no	0.64s
✅ REPOSITORY	secretlint	yes		no		no	1.23s
✅ REPOSITORY	syft	yes		no		no	1.98s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.75s
✅ SPELL	lychee	1		0		0	0.09s
✅ YAML	prettier	1	0	0		0	0.41s
✅ YAML	v8r	1		0		0	1.77s
✅ YAML	yamllint	1		0		0	0.46s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository

[Copilot]

🟢 Approval recommended

The comment matches the verified upstream tag, and the executable workflow configuration is unchanged.

No open issues 🎉

What changed in this PR

This PR corrects the version comment on MegaLinter’s pinned git-auto-commit-action to address zizmor’s ref-version-mismatch audit without changing workflow behavior.

Changes:

• Replaces # v7 with the exact tag # v7.2.0, leaving the pinned SHA unchanged.

File	Description
.github/​workflows/​mega-linter.yml	Corrects the action’s version comment to match its pinned commit.

_{Review effort: Balanced}