Web Performance Audits with Lighthouse
Abandonedjustinribeiro/lighthouse-action · Apache-2.0 · archived
Audit deployed web sites with my artisanal blend of WPT Network Emulation Profiles, Puppeteer, Chrome headless, Lighthouse, and Github Actions.
★ 58 starsLast commit 3 years agoLatest v3.0.0
F
18
/ 100
Security signals
OpenSSF Scorecard2.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: justinribeiro/lighthouse-action@dd0b03d2eea71f55393e4df552e6608b1a184db4 # v3.0.0Mutable tags like v3.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: justinribeiro/lighthouse-action@dd0b03d2eea71f55393e4df552e6608b1a184db4 # v3.0.0
Score breakdown
Security (35%)34
Popularity (20%)28
Maintenance (30%)0
Reliability (15%)0