lean-poker / boardgame.io / 25956970951

100%

push

github

ci: SHA-pin external GitHub Actions (#21)

Replace floating tags (@v4, @v2) with full 40-char commit SHAs so the
workflow's external dependencies are immutable. A poisoned floating tag
would otherwise compromise CI and, critically, the npm publishing
pipeline that holds NPM_TOKEN and publishes with provenance.

Pinned versions:
- actions/checkout      -> 34e1148 (v4.3.1)
- actions/setup-node    -> 49933ea (v4.4.0)
- coverallsapp/github-action -> 5cbfd81 (v2.3.7)

1786 of 1789 branches covered (99.83%)

Branch coverage included in aggregate %.

2669 of 2673 relevant lines covered (99.85%)

28594.06 hits per line