“Action for checking out a repo”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₆(Cm₂₃Db₁₅F₁₄Os₇Po₁₁Ti)Md₄(BkInLi₂Pa₇)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
communications/http/header
Custom HTTP token header line
notable severity, 94% confident.
communications/http/request
Calls a response JSON parser
notable severity, 96% confident.
communications/http/services
GitHub GraphQL API endpoint
notable severity, 90% confident.
communications/socket
Node TLS check disabled by option
notable severity, 90% confident.
data
Creates Node.js Buffer from UTF-8 text
notable severity, 92% confident.
data/control-flow
JavaScript empty named-parameter catch
notable severity, 96% confident.
data/decode
parseInt parses an octal string
notable severity, 95% confident.
data/encode
Encodes Node.js Buffer output as Base64
notable severity, 90% confident.
data/string
Reverses string with split reverse join
notable severity, 95% confident.
fs/directory
Shell changes working directory
notable severity, 92% confident.
process/create
JavaScript launches a script interpreter
notable severity, 94% confident.
process/create/vcs
JavaScript Git repository query command
Metadata
notable severity, 95% confident.
build
Code follows a source map directive
notable severity, 95% confident.
package/files
JavaScript package file under the dist tree
20 of 61 traits shown
Identity
| SHA-256 | 93ee9dafc7de31803dbd94d7a17c19d14a3008a5996b477f49a6f5f6a8449e44 |
|---|---|
| Canonical SHA-256 | 022859d2211d80a4f11edbe9120c9b33ed4a9854a8ca3e585f50c81c35090fb3 |
| Filename | v2.3.3 |
| Package | actions/checkout |
| Version | v2.3.3 |
| PURL | pkg:github/actions/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/actions/checkout/tar.gz/v2.3.3 |
Timeline
| First seen | 12 Aug 2026 00:18 UTC |
|---|---|
| First analyzed | 12 Aug 2026 00:37 UTC |
| Last analyzed | 21 Aug 2026 06:33 UTC |
| Last updated | 21 Aug 2026 06:33 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 73866 |
Not seeing what you expected? Let us know