github-actions[bot]
published Jun 25, 2026, 9:51 PM · updated Jun 25, 2026, 9:51 PM
Daily Runtime Threat Scan
Threat analysis complete. Verdict: CLEAN. All network calls are scoped to github.com/api.github.com for legitimate release download/version resolution. GH_TOKEN is in the environment for gh CLI use only and is never appended to any curl call. SHA256 checksum validation is implemented. No obfuscated blobs, no third-party exfiltration endpoints, no privilege escalation, no eval of downloaded content.
Generated from Daily Runtime Threat Scan · 242.8 AIC · ⊞ 36.4K · ◷