27636800708
81%

Ran 16 Jun 2026 05:48PM UTC

Jobs 2

Files 155

Run time 1min

Badge

Embed ▾

Committed 16 Jun 2026 05:45PM UTC coverage: 81.36%. Remained the same

Build # 27636800708

Build Type

push

github

Committed by

web-flow

Commit Message

chore: update CI workflows to pin pip packages and go packages (#6498)

* Pin pip dependencies by hash in docs workflow

Generate a locked requirements.txt with full SHA256 hashes for all
dependencies (direct and transitive) using pip-compile --generate-hashes.
Add --require-hashes to pip install commands in the workflow.

Keep the original version-pinned requirements as requirements.in for
future updates via pip-compile.

* Verify golangci-lint install script integrity with SHA256

Download the install script to a temp file and verify its SHA256
checksum before executing, replacing the curl-pipe-to-sh pattern.
This satisfies the OpenSSF Scorecard pinned-dependencies check.

* Pin helm-docs to v1.14.2 in helm-tools.sh

Replace @latest with a specific version to satisfy the OpenSSF
Scorecard pinned-dependencies check. Go modules with full semantic
versions are treated as pinned since the Go tool verifies downloaded
content against the checksum database.

Add a renovate comment for automated version updates.

Coverage Stats

17193 of 21132 relevant lines covered (81.36%)

1475.41 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-ubuntu-latest - 27636800708.1	16 Jun 2026 05:48PM UTC	155	81.36	GitHub Action Run
2	run-macos-latest - 27636800708.2	16 Jun 2026 05:50PM UTC	155	81.36	GitHub Action Run

kubernetes-sigs / external-dns / 27636800708
81%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27636800708

kubernetes-sigs / external-dns / 27636800708 81%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27636800708

kubernetes-sigs / external-dns / 27636800708
81%

README BADGES
x