1
96%
main: 96%

Ran 23 May 2026 05:50PM UTC

Files 74

Run time 2s

Badge

Embed ▾

Committed 23 May 2026 05:45PM UTC coverage: 94.806%. Remained the same

Job # 26339406961.1

Build Type

push

github

Committed by

web-flow

Commit Message

chore(ci): harden pages workflow permissions and pin third-party deps (#207)

Scope `pages: write` and `id-token: write` to the deploy job. Previously
declared at workflow level and inherited by the build job, which does not
need them — only `actions/deploy-pages` does.

Pin `dtolnay/rust-toolchain` to a commit SHA (was `@stable`, a mutable
ref) so an upstream force-push or account compromise cannot silently
substitute action code into the privileged Pages path.

Verify the Zola release tarball against a known SHA256 after download.
Same supply-chain class as the action pin.

Dependabot is already configured for github-actions weekly and will
continue to bump the SHA pin.

Coverage Stats

9912 of 10455 relevant lines covered (94.81%)

530658.0 hits per line

prisma-risk / tsoracle / 26339406961 / 1
96%
main: 96%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26339406961.1

prisma-risk / tsoracle / 26339406961 / 1 96% main: 96%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 26339406961.1

prisma-risk / tsoracle / 26339406961 / 1
96%
main: 96%

README BADGES
x