github-actions[bot]
published May 27, 2026, 9:49 PM · updated May 27, 2026, 9:49 PM
Daily Runtime Threat Scan
Threat scan complete — focus area: setup-cli/. All 3 files (action.yml, install.sh, install_test.sh) inspected. install.sh downloads the gh-aw binary from github.com/github/gh-aw releases with SHA256 checksum validation; all curl calls target expected release URLs. No exfiltration, obfuscated code, hidden files, or suspicious behavior found. Result: clean.
Generated from Daily Runtime Threat Scan