chore: improve actions #2

[luc122c]

🔗 Linked issue

Follow on from #41

📚 Description

• Use ubuntu-slim for agent-scan.yml
• Use persist-credentials: false where the git credentials are not needed after checkout
• Use parallel where possible

GitHub Actions announced the parallel keyword yesterday — syntactic sugar that groups independent steps to run concurrently within a single job, then waits for all of them before continuing. See the workflow syntax docs for the full reference.

Related:

• ci: improve actions workflows nitrojs/nitro#4388
• ci: use parallel keyword for concurrent workflow steps nuxt#35448

[coderabbitai]

📝 Walkthrough

Walkthrough

The PR updates several GitHub Actions workflows. It disables credential persistence on multiple actions/checkout steps, groups some checkout and setup actions into parallel blocks, and changes the agentscan job runner from ubuntu-latest to ubuntu-slim.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description has the required sections, but the linked issue is a PR reference rather than an issue number, which does not satisfy the template.	Add an open issue reference in the linked issue section (e.g. resolves #123) and briefly note the user-facing problem this PR fixes.
Title check	❓ Inconclusive	The title is conventional but too generic to convey the main workflow changes.	Rename it to mention the core change, e.g. adding parallel steps and workflow credential tweaks.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/dependency-review.yml:
- Around line 23-34: The workflow step is invalid because `parallel` is being
used where a step must be either a `run` or `uses` action. Update the
`dependency-review` workflow by removing the `parallel` wrapper and keeping the
`Check provenance downgrades` and `Dependency review` entries as separate
sibling steps, preserving the existing `uses`, `if`, and `with` settings.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 71892dd3-63e5-44d5-bf04-6b12db4c3182

📥 Commits

Reviewing files that changed from the base of the PR and between f2a3b3b and 71101c3.

📒 Files selected for processing (6)

• .github/workflows/agent-scan.yml
• .github/workflows/dependency-review.yml
• .github/workflows/reusable-release.yml
• .github/workflows/triage-comment.yml
• .github/workflows/triage-edited.yml
• .github/workflows/triage-opened.yml