Documentation

Download, verify and run one program that checks this computer, a folder, a GitHub account or an organization for PolinRider.

How to check that polinrider came from this repository: signed commits, attested releases and SHA256SUMS on every release.

What each exit code from polinrider means: clean, review, compromised or could not run.

Matches that look alarming and are harmless, each confirmed during a real cleanup, and what to do about them.

Why PolinRider comes back after a cleanup, and the order that stops it: machines, credentials, repositories, then every future push.

Check macOS, Linux or Windows for PolinRider with one read-only program, before you touch GitHub.

Check every branch and tag of every repository you own, see who pushed what, then restore or clean what was hit.

Check every repository, branch and tag in an organization, then restore or clean what was hit.

A scanner you copy into your own repository, so every push is checked for PolinRider with no third-party action.

How to report a missed detection or a false positive, and how to change the code or the indicator set.

How to report a security problem in polinrider-cleaner privately.

Read before running: an independent open source project by one person, not a commercial product, and what that means for you.