decentraland / atlas-server / 26044731158

41%

push

github

ci: pin third-party GitHub Actions to commit SHAs (#134)

## Summary

Pin mutable branch reference (`@master`) on third-party GitHub Actions
to an immutable commit SHA, preventing supply chain attacks if a
third-party maintainer account is compromised.

**Actions pinned:**
- `coverallsapp/github-action@master` → `@09b709cf`

The SHA comment preserves the original human-readable reference.

Requested by Ignacio Mazzara via Slack

---------

Signed-off-by: Gabriel Díaz <git@subsme.slmail.me>
Co-authored-by: Gabriel Díaz <git@subsme.slmail.me>

298 of 414 branches covered (71.98%)

Branch coverage included in aggregate %.

1485 of 3886 relevant lines covered (38.21%)

11.42 hits per line