github-actions[bot]
published Jun 23, 2026, 5:38 PM · updated Jun 23, 2026, 5:38 PM
Daily Runtime Threat Scan
Runtime threat scan complete. Focus area: setup-cli/ (focus_index 1). Scanned 3 files: action.yml, install.sh, install_test.sh. All network calls are scoped exclusively to github.com/github/gh-aw and api.github.com (hardcoded REPO). SHA256 checksum verification is present. GH_TOKEN is used only for gh CLI authentication — never exfiltrated. No eval, base64 decode, obfuscated code, hidden files, or suspicious patterns found. 3/3 independent judge verdicts: clean. Next scan will cover setup/ (focus_index 0).
Generated from Daily Runtime Threat Scan · 184.9 AIC · ⊞ 36.4K · ◷