Python Coverage

Stale

orgoro/coverage · MIT

GitHub Action for python coverage publish & analysis

★ 141 starsLast commit 3 months agoLatest v3.3.1

/ 100

Security signals

OpenSSF Scorecard3.3 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: orgoro/coverage@ca0c362dc1a4f100447309405e6dfea47e251495 # v3.3.1

Mutable tags like v3.3.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: orgoro/coverage@ca0c362dc1a4f100447309405e6dfea47e251495 # v3.3.1

Score breakdown

Security (35%)40

Popularity (20%)43

Maintenance (30%)60

Reliability (15%)66