Python Coverage Comment

Actively maintained

py-cov-action/python-coverage-comment-action · MIT

Publish coverage report as PR comment, and create a coverage badge & dashboard to display on the Readme for Python projects, all inside GitHub without third party servers

★ 141 starsLast commit 3 days agoLatest v4.1

/ 100

Security signals

OpenSSF Scorecard5.8 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: py-cov-action/python-coverage-comment-action@5d8df5979747514c914e1c5a12335a7cf9a2745f # v4.1

Mutable tags like v4.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: py-cov-action/python-coverage-comment-action@5d8df5979747514c914e1c5a12335a7cf9a2745f # v4.1

Score breakdown

Security (35%)65

Popularity (20%)49

Maintenance (30%)100

Reliability (15%)18