bitlysis-infrastructure

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The Dockerfile templates implement security best practices such as multi-stage builds to minimize image size and the use of non-root users (nextjs, appuser) to reduce the attack surface.
  • [SAFE]: Environment variable management follows industry standards by using .env.example files with placeholder values rather than hardcoding actual secrets. It also recommends using schema validation (Zod) for runtime environment checks.
  • [SAFE]: The GitHub Actions workflows utilize official and well-known actions (actions/checkout, actions/setup-node, pnpm/action-setup) without suspicious remote script execution or unverified dependencies.
  • [SAFE]: Vercel configuration includes standard security headers (X-Frame-Options, X-Content-Type-Options, etc.) to improve the security posture of deployed web applications.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 06:32 AM