oven-sh/setup-bun
Named by 2 kept items in this workspace.
1 items name it under classification.key entities and 1 under tools.
Search every workspace for oven-sh/setup-bun. It matches the name as written, so it can find other things that share it.
The items that name it 2
Legitimate third-party GitHub Action used maliciously here to install the Bun runtime onto the CI runner so the payload could be executed
All technologies in this workspace.