diff --git a/actions/setup/js/github_api_helpers.cjs b/actions/setup/js/github_api_helpers.cjs
index 17fb7a16cd9..4bd74548f57 100644
--- a/actions/setup/js/github_api_helpers.cjs
+++ b/actions/setup/js/github_api_helpers.cjs
@@ -1,6 +1,8 @@
 // @ts-check
 /// <reference types="@actions/github-script" />
 
+// @safe-outputs-exempt SEC-004: low-level GraphQL helper; body is sanitized by callers (add_comment.cjs, add_reaction_and_edit_comment.cjs) before it reaches this layer.
+
 /**
  * GitHub API helper functions
  * Provides common GitHub API operations with consistent error handling