“Action for checking out a repo”
AI
Legitimate GitHub Actions checkout
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 6a258412e25ea682a84df7d04daf2e006930c0c190a782706fa8fca80ddf2e6a |
|---|---|
| Canonical SHA-256 | 0007b0a9433a9ee0d4f2a40adfcd53485ea71bc0bbd6eeccb9a36f6a1e977175 |
| Filename | 7884fcad6b5d53d10323aee724dc68d8b9096a2e |
| Package | actions/checkout |
| Version | 7884fcad6b5d53d10323aee724dc68d8b9096a2e |
| PURL | pkg:github/actions/checkout@7884fcad6b5d53d10323aee724dc68d8b9096a2e |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/actions/checkout/tar.gz/7884fcad6b5d53d10323aee724dc68d8b9096a2e |
Timeline
| First seen | 21 Aug 2026 18:09 UTC |
|---|---|
| First analyzed | 22 Aug 2026 04:46 UTC |
| Last analyzed | 22 Aug 2026 04:56 UTC |
| Last updated | 22 Aug 2026 04:56 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 4092c |
Not seeing what you expected? Let us know