“Write workflows scripting the GitHub API in JavaScript”
Local reference
Suspicious dependency
Inferred
Referenced by 1 sample
Micro-behaviors
notable severity, 96% confident.
communications/http
Access-token field reference
notable severity, 94% confident.
communications/http/request
Calls a response JSON parser
notable severity, 98% confident.
communications/http/services
Imports the GitHub Actions API client
notable severity, 94% confident.
communications/http/url
Derives an origin from a URL
notable severity, 90% confident.
communications/socket
Node net.connect call with options object
notable severity, 90% confident.
data
Creates Node.js Buffer from UTF-8 text
notable severity, 90% confident.
data/compress
Imports the Node.js zlib module
notable severity, 92% confident.
data/control-flow
JavaScript empty named-parameter catch
notable severity, 100% confident.
data/db
ioredis driver reference
notable severity, 90% confident.
data/decode
Decodes Base64 data with JavaScript atob()
notable severity, 95% confident.
data/encode
Encodes Node.js Buffer output as Base64
notable severity, 90% confident.
data/source/property
Reads constructor properties repeatedly
notable severity, 90% confident.
data/string
Chains multiple JavaScript string replacements
notable severity, 96% confident.
os/env/vars
Actions OIDC token request env vars
notable severity, 92% confident.
process/create
Requires worker_threads module
notable severity, 95% confident.
process/interpreter
JavaScript AsyncFunction compiles code
Metadata
notable severity, 100% confident.
build
GitHub Actions composite action definition
notable severity, 95% confident.
library
Preserves original JavaScript console methods
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 96% confident.
package/testing/harness
Calls a test-case function
20 of 61 traits shown
Identity
| SHA-256 | c610079d3f1d7b03b58754ac8d36e8b493ebf904d247069045cdbc4a73ec500e |
|---|---|
| Canonical SHA-256 | 354e9f45ef54d7b71b3bb2d36aefb566c49cfff32685cf483d82393d6bebc05e |
| Filename | v7.0.1 |
| Package | actions/github-script |
| Version | v7.0.1 |
| PURL | pkg:github/actions/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/actions/github-script/tar.gz/v7.0.1 |
Timeline
| First seen | 12 Aug 2026 00:13 UTC |
|---|---|
| First analyzed | 12 Aug 2026 00:27 UTC |
| Last analyzed | 25 Aug 2026 03:12 UTC |
| Last updated | 25 Aug 2026 03:13 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | b8c1c |
Not seeing what you expected? Let us know