“Write workflows scripting the GitHub API in JavaScript”
AI
legitimate github-script action
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | a153c7bfa5b0e2a6265d893cd6ac0438de69738403dfd9712e6d20c0bb925e0a |
|---|---|
| Canonical SHA-256 | 0007b0a9433a9ee0d4f2a40adfcd53485ea71bc0bbd6eeccb9a36f6a1e977175 |
| Filename | e3cbab99d3a9b271e1b79fc96d103a4a5534998c |
| Package | actions/github-script |
| Version | e3cbab99d3a9b271e1b79fc96d103a4a5534998c |
| PURL | pkg:github/actions/github-script@e3cbab99d3a9b271e1b79fc96d103a4a5534998c |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/actions/github-script/tar.gz/e3cbab99d3a9b271e1b79fc96d103a4a5534998c |
Timeline
| First seen | 21 Aug 2026 19:30 UTC |
|---|---|
| First analyzed | 22 Aug 2026 05:30 UTC |
| Last analyzed | 22 Aug 2026 05:48 UTC |
| Last updated | 22 Aug 2026 05:48 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 4092c |
Not seeing what you expected? Let us know