Benign go Download

github.com/rancher/image-build-flannel v0.28.6-build20260706

GitHub Actions workflow definition pathGitHub Actions workflow file path

SHA-256c8b0fa9ba3a873afdfbc33fe3b4cb03e60db7d41d3082cc6c02750aeb4d10403

URLhttps://proxy.golang.org/github.com/rancher/image-build-flannel/@v/v0.28.6-build20260706.zip

Evidence

Selects among multiple CPU architecture payloads Makefile · lines 3–11

3UNAME_M = $(shell uname -m)
4ifndef TARGET_PLATFORMS
ifeq ($(UNAME_M), x86_64)
TARGET_PLATFORMS:=linux/amd64
else ifeq ($(UNAME_M), aarch64)
TARGET_PLATFORMS:=linux/arm64
else 
TARGET_PLATFORMS:=linux/$(UNAME_M)
endif

GitHub Actions OIDC write permission release.yml · lines 1–16

1on:
2  release:
3    types: [published]
4
5env:
⋯11 lines

NPM or Docker credential variable name release.yml · lines 23–25

60… dockerhub/${{ github.repository_owner }}/credentials password | DOCKER_PASSWORD ;
        secret/data/github/repo/${{ github.repository }}/rancher-prime-registry/credentials registry | PRIME_REGISTRY ;
  …

GitHub Actions OIDC write permission sync-upstream.yml · lines 2–17

2:17… am Sync
3on:
4  schedule:
5    - cron: "0 17 * * *"
6  workflow_dispatch:
⋯11 lines

Workflow handles environment secrets sync-upstream.yml · lines 26–31

14… 
        app-id: ${{ env.APP_ID }}
        private-key: ${{ env.PRIVATE_KEY }}
29
    - name: Sync Upstream Releases
      uses: rancher/ecm-distro-tools/actions/sync-upstream-release@016551c414f82e64a …

No evidence locations were recorded for this file. Raw result