Benign rust 175 installs Download

runner-manager 0.4.24

“Local-first autoscaling manager for ephemeral GitHub Actions self-hosted runners, with a CLI and a Ratatui TUI.”

Contains an unbounded block loopRust child stdout and stderr discarded
SHA-256944980021567fdf4273192bdcedb908effb23a8f285878ce2a187ab0532d1dd9
MaleculeH(F)Md

Evidence

References a curl- or wget-to-shell pipeline lines 7–12
7:70… ual an
8//! operator had to remember: `npm i -g` for one machine, `brew upgrade` for the
9//! next, `curl … | sh` for the host with no Node.js on it — and then, on every
10//! one of them, the question nobody thinks to ask, which is what happens to the
11//! service that is running the *old* binary right now. This command is the
12//! whole ritual, in one line, on ev …
Checksum manifest or detached signature filename lines 18–20
18:23… Release **what the newest version is**, by reading the
19//! `SHA256SUMS` that release publishes — the same document `install.sh`
20//! reads, parsed by the same rules, so the two can never disagre …
Self-update latest release path lines 34–37
34:54… rather than with the set of
35//! artifacts that actually exist. `releases/latest/download/SHA256SUMS` is a
36//! static, unauthenticated, unlimited redirect to the newest release's own
37//! checksum document — and every …
imports sha2::Digest lines 52–64
52:5… synthetic release on local disk.
53
54use std::io::{Read, Write};
55use std::path::{Path, PathBuf};
56use std::process::Command;
57
58use sha2::{Digest, Sha256};
59
60use super::{CliError, Context, Failure, UpdateArgs, write_failed};
61use runner_manager_platform::service::InstallRecord;
62
63// ---------------------------------------------------------------------------
64// Where the a …
Reads a Rust environment variable lines 130–134
130:36… dyn Write) -> Result<Self, CliError> {
131 let Some(raw) = std::env::var_os(UPDATE_BASE_URL_VARIABLE) else {
132 return Ok(Self::Remote {
133 base: format!(
134 "{}/rel …

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.