UI5 / cli-extensions / 26500432634

100%

push

github

ci: Harden workflows

- Use github.event.pull_request.user.login instead of github.actor for
  dependabot bot check (immutable PR author vs spoofable event actor)
- Move release-please workflow-level write permissions to the job that
  needs them; default to permissions: {}
- Pass matrix.path_released via env var to avoid template injection
  into the run script

54 of 54 branches covered (100.0%)

Branch coverage included in aggregate %.

109 of 109 relevant lines covered (100.0%)

7.52 hits per line