9877569570
76%

Ran 10 Jul 2024 04:21PM UTC

Jobs 1

Files 967

Run time 3min

Badge

Embed ▾

Committed 10 Jul 2024 04:01PM UTC coverage: 74.957% (-0.001%) from 74.958%

Build # 9877569570

Build Type

push

github

Committed by

web-flow

Commit Message

[StepSecurity] ci: Harden GitHub Actions (#5190)

## Summary

This pull request is created by
[StepSecurity](https://app.stepsecurity.io/securerepo) at the request of
@robertbastian. Please merge the Pull Request to incorporate the
requested changes. Please tag @robertbastian on your message if you have
any questions related to the PR.
## Security Fixes

### Pinned Dependencies

GitHub Action tags and Docker tags are mutable. This poses a security
risk. GitHub's Security Hardening guide recommends pinning actions to
full length commit.

- [GitHub Security
Guide](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)
- [The Open Source Security Foundation (OpenSSF) Security
Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies)


## Feedback
For bug reports, feature requests, and general feedback; please email
support@stepsecurity.io. To create such PRs, please visit
https://app.stepsecurity.io/securerepo.


Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Run Details

54046 of 72103 relevant lines covered (74.96%)

546255.26 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
1	92.31	-1.92%	components/experimental/src/dimension/currency/format.rs
1	89.84	-0.39%	components/segmenter/src/complex/lstm/matrix.rs
1	77.73	-0.16%	components/segmenter/src/line.rs

Jobs

ID	Job ID	Ran	Files	Coverage
1	9877569570.1	10 Jul 2024 04:21PM UTC	967	74.96	GitHub Action Run

unicode-org / icu4x / 9877569570
76%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 9877569570

unicode-org / icu4x / 9877569570 76%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 9877569570

unicode-org / icu4x / 9877569570
76%

README BADGES
x