dotnet-cli-release-pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The provided GitHub Actions workflow utilizes several standard external actions including softprops/action-gh-release, peter-evans/create-pull-request, and vedantmgoyal9/winget-releaser to handle release logistics.- [EXTERNAL_DOWNLOADS]: Fetches release checksums from the repository's own GitHub Release pages using curl to verify artifact integrity before updating package manager manifests.- [COMMAND_EXECUTION]: Executes a variety of shell-based build commands including dotnet publish, dotnet pack, and dotnet nuget push to generate and distribute CLI binaries.- [COMMAND_EXECUTION]: Invokes local scripts (python3 scripts/update-formula.py) and command-line utilities like jq and sed to programmatically update manifest files for Homebrew and Scoop.
Audit Metadata