github-actions[bot]
published Jun 27, 2026, 9:40 PM · updated Jun 27, 2026, 9:40 PM
Daily Runtime Threat Scan
Runtime threat scan complete — focus area: setup/. All 3 independent judges returned clean. Scanned: action.yml, index.js, post.js, setup.sh, clean.sh, setup/sh/ (9 key scripts), setup/js/ (key CJS files including OTLP, safe-outputs, auth, secrets). No credential exfiltration, obfuscation, unexpected payloads, or persistence mechanisms found. All downloads use github.com releases with SHA256 verification. OTLP telemetry is operator-configured only. Next run will scan setup-cli/.
Generated from Daily Runtime Threat Scan · 566.6 AIC · ⊞ 36.4K · ◷