github-actions[bot]
published Aug 17, 2026, 9:19 PM · updated Aug 17, 2026, 9:19 PM
Daily Runtime Threat Scan
Runtime threat scan complete — focus area: setup-cli/. Inspected action.yml, install.sh, install.ps1. All 3 independent security judges returned clean. The action is a standard CLI installer: downloads gh-aw binary from github.com/github/gh-aw releases with SHA256 checksum verification, uses GH_TOKEN only for GitHub API auth against github.com/api.github.com. No exfiltration, obfuscation, third-party network calls, or persistence mechanisms found. Next focus_index set to 0 (setup/).
Generated from Daily Runtime Threat Scan · 46.9 AIC · ⊞ 7.3K · ◷