Coveralls GitHub Action
Actively maintainedcoverallsapp/github-action · MIT
Coveralls Github Action
★ 518 starsLast commit 5 days agoLatest v2.3.8
C
62
/ 100
Security signals
OpenSSF Scorecard4.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8Mutable tags like v2.3.8 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
Score breakdown
Security (35%)44
Popularity (20%)53
Maintenance (30%)84
Reliability (15%)70