github-actions[bot]
published Jul 22, 2026, 9:38 PM · updated Jul 22, 2026, 9:38 PM
Daily Runtime Threat Scan
Runtime threat scan complete. Focus area: setup-cli/. Files inspected: action.yml, install.sh, install.ps1. All code is consistent with expected setup/install action behavior — downloads gh-aw binary from github.com/github/gh-aw releases, validates SHA256 checksums, installs to ~/.local/share/gh/extensions/gh-aw. No suspicious network calls, exfiltration, obfuscation, persistence, or unrelated payloads detected. Result: clean.
Generated from Daily Runtime Threat Scan · 87.9 AIC · ⊞ 36.4K · ◷