39287897391
94%

Ran 19 Oct 2026 04:44PM UTC

Jobs 5

Files 25

Run time 1min

Badge

Embed ▾

Committed 19 Oct 2026 04:43PM UTC coverage: 83.951%. Remained the same

Build # 39287897391

Build Type

push

github

Committed by

web-flow

Commit Message

Pin GitHub Actions to commit SHAs and scope packages:write (#125)

Every third-party action in the workflows was referenced by a mutable tag
(v2, v4, v2.3.6), so a compromised or force-pushed tag upstream would run
new code in this repository's CI with its secrets, including the PyPI
token and the registry credentials used by the release workflow. Only
suo/flake8-github-action was already pinned. release.yml also granted
packages:write to the whole workflow although only the docker job pushes
images.

All uses: lines now reference the commit each tag pointed at when this
change was made, with the tag kept as a trailing comment so Dependabot
(already configured for github-actions) keeps bumping them and the
version stays readable. packages:write moves to the docker job. The
versions themselves are unchanged; upgrading them stays with the regular
Dependabot flow.

Coverage Stats

476 of 567 relevant lines covered (83.95%)

4.2 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-3.10 - 39287897391.1	19 Oct 2026 04:44PM UTC	25	83.95	GitHub Action Run
2	run-3.11 - 39287897391.2	19 Oct 2026 04:44PM UTC	25	83.95	GitHub Action Run
3	run-3.12 - 39287897391.3	19 Oct 2026 04:44PM UTC	25	83.95	GitHub Action Run
4	run-3.14 - 39287897391.4	19 Oct 2026 04:44PM UTC	25	83.95	GitHub Action Run
5	run-3.13 - 39287897391.5	19 Oct 2026 04:44PM UTC	25	83.95	GitHub Action Run

thumbor / remotecv / 39287897391
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 39287897391

thumbor / remotecv / 39287897391 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 39287897391

thumbor / remotecv / 39287897391
94%

README BADGES
x