Wrap fs.mkdtempSync(path.join(os.tmpdir(), "gh-aw-artifact-download-")) in try/catch — mkdtempSync throws on missing parent directory, permission denied, or filesystem errors and will crash the action if unhandled

Wrap response.json() in try/catch — even after explicit HTTP-error handling (for example `if (!response.ok) throw ...`), reading a fetch() Response body can still reject (malformed JSON, truncated/errored stream). Without this call-site try/catch, you lose the original parse error context and get a generic, harder-to-diagnose stack instead of a specific message with `{ cause }`

Wrap response.text() in try/catch — even after explicit HTTP-error handling (for example `if (!response.ok) throw ...`), reading a fetch() Response body can still reject (malformed JSON, truncated/errored stream). Without this call-site try/catch, you lose the original parse error context and get a generic, harder-to-diagnose stack instead of a specific message with `{ cause }`

Wrap response.text() in try/catch — even after explicit HTTP-error handling (for example `if (!response.ok) throw ...`), reading a fetch() Response body can still reject (malformed JSON, truncated/errored stream). Without this call-site try/catch, you lose the original parse error context and get a generic, harder-to-diagnose stack instead of a specific message with `{ cause }`

Numeric value 'discussionNumber' parsed from a 'split(...)[index]' expression is never validated with Number.isNaN(), isNaN(), Number.isFinite(), isFinite(), or a truthiness check. A malformed delimited string will silently produce NaN, which can then be passed to downstream API calls

Numeric value 'discussionNumber' parsed from a 'split(...)[index]' expression is never validated with Number.isNaN(), isNaN(), Number.isFinite(), isFinite(), or a truthiness check. A malformed delimited string will silently produce NaN, which can then be passed to downstream API calls

Numeric value 'discussionNumber' parsed from a 'split(...)[index]' expression is never validated with Number.isNaN(), isNaN(), Number.isFinite(), isFinite(), or a truthiness check. A malformed delimited string will silently produce NaN, which can then be passed to downstream API calls

`core.error()` immediately before `core.setFailed()` with the same message is redundant: `core.setFailed()` already logs an error annotation and marks the action failed. Remove the `core.error()` call

`core.error()` immediately before `core.setFailed()` with the same message is redundant: `core.setFailed()` already logs an error annotation and marks the action failed. Remove the `core.error()` call