32874471551
91%

Ran 25 Aug 2026 04:53PM UTC

Jobs 1

Files 25

Run time 1min

Badge

Embed ▾

Committed 25 Aug 2026 04:51PM UTC coverage: 91.026%. Remained the same

Build # 32874471551

Build Type

push

github

Committed by

web-flow

Commit Message

chore(ci): pin GitHub Actions to commit SHAs (#10)

Closes this repo's five github-actions-mutable-action-tag findings. Tags and
branch names can be silently repointed by the action owner, which is how the
trivy-action and kics-github-action compromises worked.

Pinned at the versions already in use, not upgraded - checkout stays on the v5
line and setup-dotnet on v5, because moving majors is a separate change with
its own risk and belongs in its own PR.

actions/checkout@v5      -> fbc6f39 (v5.1.0)
actions/setup-dotnet@v5  -> 26b0ec1 (v5.4.0)
coverallsapp/github-action@v2 -> 8d6379e (v2.3.8)

Covers ci.yml (3) and release.yml (2). release.yml fires on tag pushes, so its
pins matter for whatever a tagged release publishes.

Note: this repo has no .github/dependabot.yml, so nothing will keep these pins
current. Worth adding, or the pins quietly rot.

Coverage Stats

710 of 780 relevant lines covered (91.03%)

17.99 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	32874471551.1	25 Aug 2026 04:53PM UTC	25	91.03	GitHub Action Run

bleedingdeacons / integrity-sharp / 32874471551
91%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32874471551

bleedingdeacons / integrity-sharp / 32874471551 91%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32874471551

bleedingdeacons / integrity-sharp / 32874471551
91%

README BADGES
x