Codacy Analysis CLI

Stale

codacy/codacy-analysis-cli-action · Apache-2.0

GitHub Action for the codacy-analysis-cli

★ 64 starsLast commit 4 months agoLatest v4.4.7

/ 100

Security signals

OpenSSF Scorecard5.0 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: codacy/codacy-analysis-cli-action@562ee3e92b8e92df8b67e0a5ff8aa8e261919c08 # v4.4.7

Mutable tags like v4.4.7 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: codacy/codacy-analysis-cli-action@562ee3e92b8e92df8b67e0a5ff8aa8e261919c08 # v4.4.7

Score breakdown

Security (35%)50

Popularity (20%)42

Maintenance (30%)39

Reliability (15%)70