actionlint
Warn
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the actionlint binary and checksum verification files from the official releases on GitHub (rhysd/actionlint).
- [COMMAND_EXECUTION]: Employs sudo install to move the linter binary into /usr/local/bin, which grants the tool system-wide execution permissions and requires elevated user privileges.
- [REMOTE_CODE_EXECUTION]: Executes the downloaded actionlint binary to perform linting tasks. The installation process includes a security best practice by verifying the file's SHA256 checksum before execution.
Audit Metadata