jacoco-reporter

Actively maintained

GitHub Action to Publish JaCoCo Format Code Coverage XML and attach it to the Workflow Run as a Check Run. Also can enforce Coverage Quality Gate.

★ 98 starsLast commit 1 months agoLatest v5.2.1

/ 100

Security signals

OpenSSF Scorecard3.7 / 10

SECURITY.md presentYes

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: PavanMudigonda/jacoco-reporter@112997f0c32da82d8bfa4a972b4afe67a15529fe # v5.2.1

Mutable tags like v5.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: PavanMudigonda/jacoco-reporter@112997f0c32da82d8bfa4a972b4afe67a15529fe # v5.2.1

Score breakdown

Security (35%)52

Popularity (20%)36

Maintenance (30%)83

Reliability (15%)34