create-install-scripts
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalyscripts/setup-cicd.sh
LOWAnomalyLOW
scripts/setup-cicd.sh
No direct malicious behavior is evident in this fragment. It is an infrastructure setup script with a significant least-privilege concern: build code supplied via the S3 source can run in a privileged CodeBuild environment with AdministratorAccess. Restrict the role to required actions and harden the bucket before use.
Confidence: 98%Severity: 68%
Audit Metadata