Go report card

Abandoned

creekorful/goreportcard-action · MIT

Github action that trigger refresh of the repository go report card (https://goreportcard.com)

★ 15 starsLast commit 6 years agoLatest v1.0

/ 100

Security signals

OpenSSF Scorecard1.8 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: creekorful/goreportcard-action@1f35ced8cdac2cba28c9a2f2288a16aacfd507f9 # v1.0

Mutable tags like v1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: creekorful/goreportcard-action@1f35ced8cdac2cba28c9a2f2288a16aacfd507f9 # v1.0

Score breakdown

Security (35%)31

Popularity (20%)19

Maintenance (30%)4

Reliability (15%)30