ActionRank
Check your actions

rust-grcov

Abandoned

actions-rs/grcov · MIT · archived

📈 GitHub Action for code coverage reporting with grcov

★ 106 starsLast commit 6 years agoLatest v0.1.6
F
22
/ 100
Security 40Maintenance 0Popularity 40Reliability 0

Security signals

OpenSSF Scorecard3.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: actions-rs/grcov@770fa904bcbfc50da498080d1511da7388e6ddc6 # v0.1.6

Mutable tags like v0.1.6 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: actions-rs/grcov@770fa904bcbfc50da498080d1511da7388e6ddc6 # v0.1.6

Score breakdown

Security (35%)40
Popularity (20%)40
Maintenance (30%)0
Reliability (15%)0