Open-source atomic malware analysis

Analyze another

reviewdog/action-setup v1

UNKNOWN
Verdict: BENIGN
SHA256: 603e02bcc59e94129ab5672d5db65c2daa05128616e239b219f9bca46c448425
“:dog: Setup reviewdog action”
Mal-ecule
H₅(Cm₅Db₃F₆Os₂Po₄)Md(Bk)
Size 10.6 KB download
First seen 4 days ago
Analyzed 2 days ago
Package pkg:github/reviewdog/action-setup@v1
Ecosystem github
Source codeload.github.com

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/download curl/wget uses variable input and output paths
notable severity, 85% confident.
communications/http/request curl HTTP client call
notable severity, 86% confident.
data/archive/extract unzip extracts archive to directory
notable severity, 80% confident.
data/decode gunzip tool reference
notable severity, 90% confident.
data/encode Generic decompression call
notable severity, 75% confident.
fs/chmod/executable chmod +x (make executable)
notable severity, 95% confident.
fs/directory Shell changes working directory
notable severity, 90% confident.
fs/file Force-deletes a shell variable target
notable severity, 86% confident.
fs/file/write Shell echo redirects output to a file
notable severity, 85% confident.
os/env/vars GITHUB_PATH environment file
notable severity, 94% confident.
os/sysinfo/platform Host architecture selects a build variant
notable severity, 94% confident.
process/create Cross-language child-process execution capability
notable severity, 70% confident.
process/create/script Executes a relative shell script path (.sh)
notable severity, 90% confident.
process/create/shell Shell command execution capability
baseline severity, 90% confident.
communications/http Contains an HTTPS URL prefix
baseline severity, 80% confident.
os/console Combined stdout+stderr redirect to /dev/null
baseline severity, 88% confident.
os/service GitHub Actions GITHUB_TOKEN secret

Metadata

notable severity, 100% confident.
build GitHub Actions composite action definition
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile Contains common English function words

20 of 25 traits shown

Identity

SHA-256 603e02bcc59e94129ab5672d5db65c2daa05128616e239b219f9bca46c448425
Filename action-setup@v1
Package reviewdog/action-setup
Version v1
PURL pkg:github/reviewdog/action-setup@v1

Origin

Source x
Feed pkg.go.dev
Ecosystem github
Domain github.com
URL https://codeload.github.com/reviewdog/action-setup/tar.gz/v1

Timeline

First seen 11 Aug 2026 16:07 UTC
First analyzed 11 Aug 2026 16:06 UTC
Last analyzed 13 Aug 2026 05:24 UTC
Last updated 13 Aug 2026 05:25 UTC

Labeling

Label unknown
Traits version 73866