[jaredwray]

Please check if the PR fulfills these requirements

• Followed the Contributing guidelines and Code of Conduct
• Tests for the changes have been added (for bug fixes/features) with 100% code coverage.

This chore changes workflow names only. No new test is required.

What kind of change does this PR introduce?

Chore. The CodeQL job uses its job id as the check name.

Summary

The CodeQL job name was Analyze.
The job id analyze is now the check name.
Other workflow names already use kebab-case.
No job name: field contains a space.

A matrix check still shows a suffix, for example build-test (22).
GitHub adds that suffix. The YAML name: fields have no spaces.

Status

DEFENSE_IN_DEPTH.md:

• The zizmor item, the persist-credentials item, and the package-manager-cache item are done in PR root - chore: defense - lint workflows with zizmor #168.
• Workflow name: and job name: contain no spaces → (PR root - chore: defense - use kebab-case workflow names #169 pending)

Verification

• Local zizmor 1.30.1 in offline mode reports no findings.
• This pull request does not add, change, or delete a test. The test-audit gate does not apply.

Reference

defense-in-depth-nodejs § 4

  

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-11T00:43:20.319444Z	1511fc5	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[gemini-code-assist]

Code Review

This pull request updates the DEFENSE_IN_DEPTH.md file to mark several security checklist items as completed, specifically referencing PR #168. These items include linting workflows with zizmor, setting persist-credentials to false on checkouts, and disabling default caching in actions/setup-node for artifact-publishing workflows. There are no review comments, and we have no feedback to provide.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (c1d7fcd) to head (0c4f851).

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #169   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            9         9           
  Lines          639       639           
  Branches       151       146    -5     
=========================================
  Hits           639       639           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.