39139645359
100%

Ran 18 Oct 2026 03:15PM UTC

Jobs 5

Files 7

Run time 1min

Badge

Embed ▾

Committed 18 Oct 2026 03:15PM UTC coverage: 100.0%. Remained the same

Build # 39139645359

Build Type

push

github

Committed by

marcelometal

Commit Message

Harden the GitHub Actions workflows

Every action was referenced by a mutable tag, so a compromised or force
pushed tag on any of the seven upstream repositories would run arbitrary
code in CI with the repository token. The references are now full commit
SHAs with the resolved version in a trailing comment, which Dependabot keeps
updating. The unittest workflow gains a permissions block (contents: read
plus checks: write, which the Coveralls action uses to publish its check),
Dependabot now also watches the pip ecosystem so poetry.lock bumps stop
depending on security-only updates, and the stale workflow's cron is fixed
from "* */12 * * *", which fired every minute during hours 0 and 12, to
"0 */12 * * *".

pylint also loses --exit-zero in the Makefile and in the pre-commit hook.
The codebase is at 10/10 today, so the only effect is that a new violation
now fails make test and CI instead of being printed and ignored; verified
locally by adding an unused import and watching make pylint exit non-zero.

Coverage Stats

262 of 262 relevant lines covered (100.0%)

5.0 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-3.11 - 39139645359.1	18 Oct 2026 03:15PM UTC	7	100.0	GitHub Action Run
2	run-3.13 - 39139645359.2	18 Oct 2026 03:15PM UTC	7	100.0	GitHub Action Run
3	run-3.12 - 39139645359.3	18 Oct 2026 03:15PM UTC	7	100.0	GitHub Action Run
4	run-3.14 - 39139645359.4	18 Oct 2026 03:15PM UTC	7	100.0	GitHub Action Run
5	run-3.15 - 39139645359.5	18 Oct 2026 03:15PM UTC	7	100.0	GitHub Action Run

thumbor / libthumbor / 39139645359
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 39139645359

thumbor / libthumbor / 39139645359 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 39139645359

thumbor / libthumbor / 39139645359
100%

README BADGES
x