ActionRank

jacoco-badge-generator

Actively maintained

cicirello/jacoco-badge-generator · MIT

Coverage badges, and pull request coverage checks, from JaCoCo reports in GitHub Actions

121 starsLast commit 12 days agoLatest v2.12.1
C
55
/ 100
Security 51Maintenance 66Popularity 35Reliability 70

Security signals

OpenSSF Scorecard5.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: cicirello/jacoco-badge-generator@72266185b7ee48a6fd74eaf0238395cc8b14fef8 # v2.12.1

Mutable tags like v2.12.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: cicirello/jacoco-badge-generator@72266185b7ee48a6fd74eaf0238395cc8b14fef8 # v2.12.1

Score breakdown

Security (35%)51
Popularity (20%)35
Maintenance (30%)66
Reliability (15%)70