README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

Display Build Status and Test Coverage Badges for a JavaScript

Project badges from private project into a private GitHub

README badge coverage doesn't charge for `coveralls` · Issue #344

More Badges please, I need Project Insights! - CI / CD 9

shields-io · GitHub Topics · GitHub

repo-badges/README.md at main · dwyl/repo-badges · GitHub

readme-badges · GitHub Topics · GitHub

Using the API to add Codacy Grade details to the Readme - Codacy

Badges in the README are confusing · Issue #1079 · yegor256/takes

Badges inside tables render poorly on mobile devices. · Issue

GitHub – How to display the status badge for a GitHub Action

Project badges from private project into a private GitHub

markdown - Why do GitHub workflow badges not render on Jekyll