From 1d28128c20ba2bcce78931ace1525c8f77b15a2e Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Tue, 21 Jul 2026 15:18:09 +0800
Subject: [PATCH] chore(ci): audit dependency fingerprint exports (#112190)

---
 .github/actions/setup-node-env/dependency-fingerprint.mjs | 2 +-
 config/knip.scripts-exports.config.ts                     | 1 +
 test/scripts/check-deadcode-exports.test.ts               | 1 +
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/actions/setup-node-env/dependency-fingerprint.mjs b/.github/actions/setup-node-env/dependency-fingerprint.mjs
index 0b6f17e4037d..a86b63e9cb25 100644
--- a/.github/actions/setup-node-env/dependency-fingerprint.mjs
+++ b/.github/actions/setup-node-env/dependency-fingerprint.mjs
@@ -131,7 +131,7 @@ function trackedPackageManifests(workspace) {
     .sort();
 }
 
-export function computeDependencyFingerprint({ workspace, frozenLockfile }) {
+function computeDependencyFingerprint({ workspace, frozenLockfile }) {
   const hash = createHash("sha256");
   addRecord(hash, "contract", "frozen-lockfile", String(frozenLockfile));
 
diff --git a/config/knip.scripts-exports.config.ts b/config/knip.scripts-exports.config.ts
index 265c6118578f..00080e14f568 100644
--- a/config/knip.scripts-exports.config.ts
+++ b/config/knip.scripts-exports.config.ts
@@ -12,6 +12,7 @@ const scriptEntries = productionConfig.workspaces["."].entry.filter((entry) =>
 );
 
 const repositoryToolEntries = [
+  ".github/actions/setup-node-env/dependency-fingerprint.mjs!",
   ".github/actions/register-bind-mount-cleanup/main.cjs!",
   ".github/actions/register-bind-mount-cleanup/post.cjs!",
   "apps/android/scripts/build-release-artifacts.ts!",
diff --git a/test/scripts/check-deadcode-exports.test.ts b/test/scripts/check-deadcode-exports.test.ts
index a986a189f723..b1c2eef142cc 100644
--- a/test/scripts/check-deadcode-exports.test.ts
+++ b/test/scripts/check-deadcode-exports.test.ts
@@ -119,6 +119,7 @@ describe("check-deadcode-exports", () => {
     expect(scriptRootWorkspace.entry).toEqual(
       expect.arrayContaining([
         ".agents/skills/**/scripts/**/*.{js,mjs,cjs,ts,mts,cts}!",
+        ".github/actions/setup-node-env/dependency-fingerprint.mjs!",
         ".github/actions/register-bind-mount-cleanup/main.cjs!",
         "apps/android/scripts/build-release-artifacts.ts!",
         "security/opengrep/check-rule-metadata.mjs!",