30554449959
73%
main: 73%

Ran 30 Jul 2026 03:00PM UTC

Jobs 1

Files 1

Run time 1min

Badge

Embed ▾

Committed 30 Jul 2026 02:54PM UTC coverage: 73.089%. Remained the same

Build # 30554449959

Build Type

Pull #289

github

Committed by

jonasbn

Commit Message

Fix zizmor findings: artipacked, cache-poisoning, dependabot-cooldown

- codeql.yml, go-releaser.yml: set persist-credentials: false on
  checkout so the GITHUB_TOKEN isn't left in .git/config where a
  later artifact upload could leak it
- go-releaser.yml: disable setup-go's default caching, since the
  cache is shared across branches/PRs and this tag-triggered release
  workflow shouldn't trust a cache a PR build could have poisoned
- dependabot.yml: add a 7-day cooldown and minor/patch grouping to
  all three ecosystems so PRs don't open the same day a release
  drops, before it's had a chance to be yanked or patched

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Pull Request Pull Request #289: Fix zizmor findings: artipacked, cache-poisoning, dependabot-cooldown

Coverage Stats

239 of 327 relevant lines covered (73.09%)

50.87 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	30554449959.1	30 Jul 2026 03:00PM UTC	1	73.09	GitHub Action Run

jonasbn / stevedore / 30554449959
73%
main: 73%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 30554449959

jonasbn / stevedore / 30554449959 73% main: 73%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 30554449959

jonasbn / stevedore / 30554449959
73%
main: 73%

README BADGES
x