{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9440465569496155,
        "class": 0
      },
      {
        "id": 1,
        "prob": 0.9320980310440063,
        "class": 0
      },
      {
        "id": 2,
        "prob": 0.9439182281494141,
        "class": 0
      },
      {
        "id": 3,
        "prob": 0.9440465569496155,
        "class": 0
      },
      {
        "id": 4,
        "prob": 0.943630039691925,
        "class": 0
      },
      {
        "id": 5,
        "prob": 0.9409737586975098,
        "class": 0
      }
    ],
    "prob": 0.94404656,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-05-01T11:37:20Z"
  },
  "path": "mach-composer-new-component-version-action-main.tar.gz",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(AsC)H(Db)",
        "id": 0,
        "sz": 3232,
        "ts": [
          {
            "a": "T1059.004",
            "c": 1.0,
            "d": "GitHub Actions composite action",
            "e": [
              "composite"
            ],
            "i": "objectives/command-and-control/beacon::composite-action-type",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "LLM secret data target",
            "e": [
              "secret"
            ],
            "i": "micro-behaviors/data/text/llm::llm-secret-target",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.949999988079071,
            "d": "Gzip-compressed data blob",
            "e": [
              "1f 8b"
            ],
            "i": "objectives/anti-static/obfuscation/payload/data-file::gzip-magic-data-blob",
            "l": 1,
            "m": "F0001"
          }
        ],
        "sha": "03cfb284a58e233b7de1e6a0c64a815b439ad5827fdd697559468a910f32ade7",
        "path": "/data/samples/unknown/harvest/github_actions/mach-composer-new-component-version-action-main.tar.gz",
        "type": "tar.gz"
      },
      {
        "dp": 1,
        "id": 1,
        "ms": {
          "text": {
            "digit_ratio": 0.0,
            "space_count": 152.0,
            "total_lines": 21.0,
            "char_entropy": 5.09,
            "unique_chars": 56.0,
            "avg_line_length": 49.86,
            "max_line_length": 78.0,
            "empty_line_ratio": 0.19,
            "last_line_length": 9.0,
            "most_common_char": "o",
            "whitespace_ratio": 0.16,
            "most_common_ratio": 0.05,
            "line_length_stddev": 31.58,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            0,
            "MIT License"
          ],
          [
            13,
            "Copyright (c) 2022 Lab Digital"
          ],
          [
            45,
            "Permission is hereby granted, free of charge, to any person obtaining a copy"
          ],
          [
            122,
            "of this software and associated documentation files (the \"Software\"), to deal"
          ],
          [
            200,
            "in the Software without restriction, including without limitation the rights"
          ],
          [
            277,
            "to use, copy, modify, merge, publish, distribute, sublicense, and/or sell"
          ],
          [
            351,
            "copies of the Software, and to permit persons to whom the Software is"
          ],
          [
            421,
            "furnished to do so, subject to the following conditions:"
          ],
          [
            479,
            "The above copyright notice and this permission notice shall be included in all"
          ],
          [
            558,
            "copies or substantial portions of the Software."
          ],
          [
            607,
            "THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR"
          ],
          [
            682,
            "IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,"
          ],
          [
            755,
            "FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE"
          ],
          [
            831,
            "AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER"
          ],
          [
            902,
            "LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,"
          ],
          [
            980,
            "OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE"
          ],
          [
            1058,
            "SOFTWARE."
          ]
        ],
        "sz": 1068,
        "sha": "bb1028f4ae3061bc6399876a1b74e9ae62b3c3e142def832be56b4d7566864e5",
        "path": "/data/samples/unknown/harvest/github_actions/mach-composer-new-component-version-action-main.tar.gz!!new-component-version-action-main/LICENSE",
        "type": "text"
      },
      {
        "dp": 1,
        "id": 2,
        "ms": {
          "text": {
            "digit_ratio": 0.12,
            "space_count": 169.0,
            "total_lines": 32.0,
            "char_entropy": 4.62,
            "unique_chars": 53.0,
            "avg_line_length": 20.72,
            "max_line_length": 88.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 28.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.29,
            "most_common_ratio": 0.06,
            "line_length_stddev": 19.36,
            "repeated_char_sequences": 4.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            0,
            "name: Zizmor"
          ],
          [
            26,
            "branches: [\"main\"]"
          ],
          [
            49,
            "pull_request:"
          ],
          [
            65,
            "branches: [\"**\"]"
          ],
          [
            97,
            "- \".github/workflows/**\""
          ],
          [
            128,
            "- \".github/actions/**\""
          ],
          [
            158,
            "permissions: {}"
          ],
          [
            191,
            "name: Run zizmor"
          ],
          [
            212,
            "runs-on: ubuntu-latest"
          ],
          [
            239,
            "permissions:"
          ],
          [
            256,
            "contents: read"
          ],
          [
            277,
            "actions: read"
          ],
          [
            308,
            "- name: Checkout repository"
          ],
          [
            342,
            "uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2"
          ],
          [
            437,
            "persist-credentials: false"
          ],
          [
            475,
            "- name: Run zizmor"
          ],
          [
            500,
            "uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2"
          ],
          [
            603,
            "advanced-security: false"
          ],
          [
            638,
            "annotations: true"
          ],
          [
            666,
            "min-severity: high"
          ]
        ],
        "sz": 695,
        "sha": "e14efc2b28d05a04ecd3017c0b958926b367c7211166afde30aa0689b7f556eb",
        "path": "/data/samples/unknown/harvest/github_actions/mach-composer-new-component-version-action-main.tar.gz!!new-component-version-action-main/.github/workflows/zizmor.yaml",
        "type": "github-actions"
      },
      {
        "dp": 1,
        "id": 3,
        "ms": {
          "text": {
            "digit_ratio": 0.12,
            "space_count": 189.0,
            "total_lines": 34.0,
            "char_entropy": 4.68,
            "unique_chars": 54.0,
            "avg_line_length": 22.59,
            "max_line_length": 93.0,
            "empty_line_ratio": 0.12,
            "last_line_length": 20.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.28,
            "most_common_ratio": 0.06,
            "line_length_stddev": 21.87,
            "repeated_char_sequences": 4.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            0,
            "name: Pinact"
          ],
          [
            26,
            "branches: [\"main\"]"
          ],
          [
            49,
            "pull_request:"
          ],
          [
            65,
            "branches: [\"**\"]"
          ],
          [
            97,
            "- \".github/workflows/**\""
          ],
          [
            128,
            "- \".github/actions/**\""
          ],
          [
            157,
            "- \"action.yml\""
          ],
          [
            178,
            "- \"action.yaml\""
          ],
          [
            201,
            "permissions: {}"
          ],
          [
            234,
            "# Only run on pull requests from the same repository"
          ],
          [
            291,
            "if: github.event.pull_request.head.repo.full_name == github.repository"
          ],
          [
            366,
            "runs-on: ubuntu-latest"
          ],
          [
            393,
            "permissions:"
          ],
          [
            410,
            "contents: read"
          ],
          [
            442,
            "- name: Checkout"
          ],
          [
            465,
            "uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2"
          ],
          [
            560,
            "persist-credentials: false"
          ],
          [
            598,
            "- name: Pin actions"
          ],
          [
            624,
            "uses: suzuki-shunsuke/pinact-action@cf51507d80d4d6522a07348e3d58790290eaf0b6 # v2.0.0"
          ],
          [
            732,
            "skip_push: true"
          ],
          [
            758,
            "verify: true"
          ]
        ],
        "sz": 802,
        "sha": "33909d356f163c63f38dd12dabe6b90105f4a68d32d2cb6564c6f2f07e52879c",
        "path": "/data/samples/unknown/harvest/github_actions/mach-composer-new-component-version-action-main.tar.gz!!new-component-version-action-main/.github/workflows/pinact.yaml",
        "type": "github-actions"
      },
      {
        "f": "O(C)H(Db)",
        "dp": 1,
        "id": 4,
        "ms": {
          "text": {
            "digit_ratio": 0.02,
            "space_count": 329.0,
            "total_lines": 55.0,
            "char_entropy": 4.85,
            "unique_chars": 72.0,
            "avg_line_length": 27.71,
            "max_line_length": 93.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 21.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.07,
            "line_length_stddev": 19.95,
            "repeated_char_sequences": 4.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            0,
            "name: 'Register'"
          ],
          [
            17,
            "description: 'Register a new component version in Mach Composer Cloud'"
          ],
          [
            88,
            "author: 'Lab Digital'"
          ],
          [
            120,
            "color: 'green'"
          ],
          [
            137,
            "icon: 'package'"
          ],
          [
            177,
            "description: 'The component'"
          ],
          [
            210,
            "required: true"
          ],
          [
            229,
            "organization:"
          ],
          [
            245,
            "description: 'Key of the organization'"
          ],
          [
            318,
            "description: 'Key of the project'"
          ],
          [
            383,
            "required: false"
          ],
          [
            403,
            "description: 'Extra arguments to pass to register-component-version'"
          ],
          [
            489,
            "description: 'Mach Composer Cloud client id'"
          ],
          [
            557,
            "client_secret:"
          ],
          [
            574,
            "description: 'Mach Composer Cloud client secret'"
          ],
          [
            646,
            "mach_composer_version:"
          ],
          [
            671,
            "description: 'Mach Composer Cli version'"
          ],
          [
            736,
            "default: '2.9.3'"
          ],
          [
            764,
            "using: 'composite'"
          ],
          [
            794,
            "- name: Install MACH composer"
          ],
          [
            828,
            "uses: mach-composer/setup-mach-composer@3ca0bd4e2c0f08fefc803a36fcbba70e5ee00d67 # main"
          ],
          [
            934,
            "version: ${{ inputs.mach_composer_version }}"
          ],
          [
            988,
            "- name: Register new version"
          ],
          [
            1021,
            "shell: bash"
          ],
          [
            1050,
            "MCC_DEBUG: 1"
          ],
          [
            1071,
            "MCC_CLIENT_ID: ${{ inputs.client_id }}"
          ],
          [
            1118,
            "MCC_CLIENT_SECRET: ${{ inputs.client_secret }}"
          ],
          [
            1173,
            "INPUT_ORGANIZATION: ${{ inputs.organization }}"
          ],
          [
            1228,
            "INPUT_PROJECT: ${{ inputs.project }}"
          ],
          [
            1273,
            "INPUT_COMPONENT: ${{ inputs.component }}"
          ],
          [
            1322,
            "INPUT_ARGS: ${{ inputs.args }}"
          ],
          [
            1374,
            "mach-composer cloud register-component-version \\"
          ],
          [
            1431,
            "--organization \"$INPUT_ORGANIZATION\" \\"
          ],
          [
            1480,
            "--project \"$INPUT_PROJECT\" \\"
          ],
          [
            1519,
            "--auto \"$INPUT_COMPONENT\" \\"
          ],
          [
            1557,
            "$INPUT_ARGS"
          ]
        ],
        "sz": 1579,
        "ts": [
          {
            "a": "T1059.004",
            "c": 1.0,
            "d": "GitHub Actions composite action",
            "e": [
              "composite"
            ],
            "i": "objectives/command-and-control/beacon::composite-action-type",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "LLM secret data target",
            "e": [
              "secret"
            ],
            "i": "micro-behaviors/data/text/llm::llm-secret-target",
            "l": 1
          }
        ],
        "sha": "06ab0e9e9d88430550d7507ea3f06a5d581895135a39ac97e0f58558a645c19c",
        "path": "/data/samples/unknown/harvest/github_actions/mach-composer-new-component-version-action-main.tar.gz!!new-component-version-action-main/action.yml",
        "type": "github-actions"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 5,
        "ms": {
          "text": {
            "digit_ratio": 0.16,
            "space_count": 113.0,
            "total_lines": 28.0,
            "char_entropy": 4.87,
            "unique_chars": 62.0,
            "avg_line_length": 19.64,
            "max_line_length": 89.0,
            "empty_line_ratio": 0.18,
            "last_line_length": 28.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.08,
            "line_length_stddev": 21.44,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            0,
            "name: Validations"
          ],
          [
            61,
            "permissions:"
          ],
          [
            74,
            "contents: write"
          ],
          [
            92,
            "pull-requests: write"
          ],
          [
            115,
            "actions: write"
          ],
          [
            150,
            "runs-on: ubuntu-latest"
          ],
          [
            177,
            "if: github.event.type != 'pull_request'"
          ],
          [
            232,
            "- name: Checkout"
          ],
          [
            253,
            "uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0"
          ],
          [
            344,
            "fetch-depth: 0"
          ],
          [
            368,
            "- name: Prepare release"
          ],
          [
            396,
            "uses: labd/changie-release-action@2acb1823176f24cf26cd699b82c4ad7639190ae6 # v0.1.1"
          ],
          [
            498,
            "github-token: ${{ secrets.GITHUB_TOKEN }}"
          ],
          [
            548,
            "release-workflow: ''"
          ]
        ],
        "sz": 578,
        "ts": [
          {
            "c": 0.8199999928474426,
            "d": "LLM secret data target",
            "e": [
              "token"
            ],
            "i": "micro-behaviors/data/text/llm::llm-secret-target",
            "l": 1
          }
        ],
        "sha": "d0919cc0bc84602c2cc00e62c2d528b8b026060eb9a3533b23aa09ecd4039780",
        "path": "/data/samples/unknown/harvest/github_actions/mach-composer-new-component-version-action-main.tar.gz!!new-component-version-action-main/.github/workflows/release.yaml",
        "type": "github-actions"
      }
    ],
    "tv": "feb13"
  }
}