container-publish
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for the .NET 10 SDK's native containerization features. All provided commands and MSBuild properties are standard for the platform.
- [SAFE]: External references to container registries (GitHub Container Registry, Azure Container Registry, Docker Hub) and GitHub Actions are used correctly and target well-known, reputable services.
- [SAFE]: The instructions actively promote security hardening by defaulting to non-root users and recommending 'chiseled' (distroless) images to minimize the production attack surface.
- [SAFE]: Secret management examples in the provided GitHub Actions workflow follow best practices by utilizing GitHub Secrets rather than hardcoding sensitive information.
Audit Metadata