35423168207
100%

Ran 19 Sep 2026 05:11AM UTC

Jobs 1

Files 18

Run time 1min

Badge

Embed ▾

Committed 19 Sep 2026 05:08AM UTC coverage: 100.0%. Remained the same

Build # 35423168207

Build Type

push

github

Committed by

web-flow

Commit Message

ci: pin GitHub Actions to commit SHAs and add Dependabot (#138)

A tag like actions/checkout@v6 is a mutable pointer that can be
retagged upstream (or by a compromised maintainer account) to point
at different code, which every workflow referencing it then silently
runs — as happened with tj-actions/changed-files (CVE-2025-30066).
Pin each action to a full-length commit SHA (with the version as a
trailing comment) and bump to the latest release while at it, and add
.github/dependabot.yml on the github-actions ecosystem so future
bumps arrive as reviewable PRs instead of silent drift.

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Coverage Stats

4268 of 4268 relevant lines covered (100.0%)

3071535.36 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	Go- - 35423168207.1	19 Sep 2026 05:11AM UTC	18	100.0	GitHub Action Run

uber / h3-go / 35423168207
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 35423168207

uber / h3-go / 35423168207 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 35423168207

uber / h3-go / 35423168207
100%

README BADGES
x