Go coverage report

Stale

ncruces/go-coverage-report · MIT

GitHub Action to add a coverage badge to your Go repo

★ 88 starsLast commit 6 months agoLatest v0.3.2

/ 100

Security signals

OpenSSF Scorecard2.1 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: ncruces/go-coverage-report@dfc237255099f2d25066babde51253992175e365 # v0.3.2

Mutable tags like v0.3.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: ncruces/go-coverage-report@dfc237255099f2d25066babde51253992175e365 # v0.3.2

Score breakdown

Security (35%)33

Popularity (20%)36

Maintenance (30%)49

Reliability (15%)70