github-actions[bot]
published Jul 20, 2026, 5:53 PM · updated Jul 20, 2026, 5:53 PM
Daily Runtime Threat Scan
Threat scan complete for setup-cli/ (focus_index 1). Inspected action.yml, install.sh, install.ps1. All files implement standard gh-aw CLI installation: downloading the binary from github/gh-aw GitHub releases with SHA256 checksum verification, installing to ~/.local/share/gh/extensions/gh-aw, and writing installed_version to GITHUB_OUTPUT. No secret collection, exfiltration, obfuscation, or unexpected behavior detected. Result: clean.
Generated from Daily Runtime Threat Scan · 88.1 AIC · ⊞ 36.4K · ◷