Benign github Download

argumentcomputer/ci-workflows main

“GitHub Actions workflows and templates for use in Argument repos”

Backtick shell command-substitution syntaxComposite action step script body

SHA-2567bce8155b91e2122cf4fb50168c31312cbee219b413bc90f856899039f50962c

URLhttps://codeload.github.com/argumentcomputer/ci-workflows/tar.gz/main

Evidence

GitHub Actions installs packages with apt-get action.yml · lines 1–16

⋯10 lines
using: "composite"
steps: 
- run: sudo apt-get update && sudo apt-get install -y ${INPUTS_PACKAGES}
  shell: bash
  env:
    INPUTS_PACKAGES: ${{ inputs.packages }}

actions/checkout workflow step reference typos.yml · lines 10–18

3… bs:
typo-check:
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@v7
      with:
        persist-credentials: false
    - uses: dtolnay/rust-toolchain@stable
    - uses: Swatinem/rust-cach …

Data-access verb token typos.yml · lines 51–52

51:49… --porcelain | awk -F. '{OFS=""; print "**/*."$NF}' | sort -u | paste -sd,)"
52          echo "paths=$FILE_PATHS" | tee -a $GITHUB_OUTP …

Workflow references multiple Actions secrets typos.yml · lines 56–60

4…      with:
        client-id: ${{ secrets.TOKEN_APP_ID }}
        private-key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
        permission-contents: write
        permission-pull- …

References Actions-provided GITHUB_TOKEN docs.yml · lines 1–31

⋯8 lines
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@v7
      with:
        repository: argumentcomputer/ci-workflows
⋯13 lines
      uses: peaceiris/actions-gh-pages@v4
      with:
        github_token: ${{ secrets.GITHUB_TOKEN }}
        publish_dir: ./target/doc
        destination_dir: docs

No evidence locations were recorded for this file. Raw result