chore: update to ld-find-code-refs 2.17.0

[tknopp-ld]

Summary

• Sync Action metadata from ld-find-code-refs 2.17.0
• Adds optional docker/ entry point with dockerImage input

---

Note

Overview
Bumps the container action to ld-find-code-refs-github-action 2.17.0 (Dockerfile and README workflow pins).

Adds a new docker/ composite entry point so workflows can run the same scanner via docker run with a configurable dockerImage (mirrored or proxy registry), after docker/login-action or similar. The README documents this pattern; the root Docker-based action is unchanged for existing users.

The composite step validates workspace, event file, and Docker CLI, forwards proxy env vars, and passes the same LD_* and GitHub context into the container as the root action.

^{Reviewed by Cursor Bugbot for commit df5dc60. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{Reviewed by Cursor Bugbot for commit df5dc60. Configure here.}

[cursor]

Custom token always overridden

Low Severity

The composite step always sets GITHUB_TOKEN to github.token, which overrides a caller-provided token from the workflow env block. Workflows that pass a PAT for private-repo GitHub API access keep that token with the root Action, but silently lose it on the docker/ entry point.

Additional Locations (1)

• docker/action.yml#L115-L116

 

^{Reviewed by Cursor Bugbot for commit df5dc60. Configure here.}