ActionRank

JaCoCo Report

Actively maintained

Madrapps/jacoco-report · MIT

Github action that publishes the JaCoCo report as a comment in the Pull Request

201 starsLast commit 6 days agoLatest v1.8.0
B
73
/ 100
Security 66Maintenance 92Popularity 44Reliability 92

Security signals

OpenSSF Scorecard6.0 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: Madrapps/jacoco-report@e51ce1f46f7f8b5331593f935e59cbaf44b84920 # v1.8.0

Mutable tags like v1.8.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: Madrapps/jacoco-report@e51ce1f46f7f8b5331593f935e59cbaf44b84920 # v1.8.0

Score breakdown

Security (35%)66
Popularity (20%)44
Maintenance (30%)92
Reliability (15%)92