zitadel-helm
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides guidance for a legitimate deployment scenario of the ZITADEL open-source project.
- [SAFE]: Configuration examples demonstrate secure secret management practices by utilizing the Kubernetes
valuesFrompattern to reference sensitive data (passwords, master keys) from existing secrets rather than hardcoding them in plaintext. - [SAFE]: The instructions for generating the ZITADEL masterkey use a standard, secure local command (
tr -dc A-Za-z0-9 </dev/urandom | head -c 32) that does not involve untrusted remote code or exfiltration. - [SAFE]: External references point to ArtifactHub, which is a well-known service for hosting Helm charts.
- [SAFE]: The included example for bootstrapping a FirstInstance uses a clearly labeled default password ('Admin123!') in a documentation context, which is common for initial configuration templates.
Audit Metadata