github-actions[bot]
published Aug 11, 2026, 4:20 PM · updated Aug 11, 2026, 4:20 PM
Daily Runtime Threat Scan
Runtime threat scan complete. Focus area: setup-cli/. Scanned action.yml, install.sh, and install.ps1. All 3 files show standard installer behavior: binary download from github.com releases, SHA256 checksum verification, install to ~/.local/share/gh/extensions/gh-aw/, GH_TOKEN used only for GitHub API auth. 2/3 judges returned clean verdict. No credible threats found.
Generated from Daily Runtime Threat Scan · 48.1 AIC · ⊞ 7.3K · ◷