github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The workflow templates reference several external GitHub Actions from well-known sources, including official GitHub actions (
actions/checkout,actions/setup-node,actions/setup-python), Docker (docker/build-push-action), AWS (aws-actions/configure-aws-credentials), and security vendors (aquasecurity/trivy-action,snyk/actions/node). These are standard tools for CI/CD pipelines. - [CREDENTIALS_SAFE]: The provided templates follow security best practices by using GitHub Secrets placeholders (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }},${{ secrets.SNYK_TOKEN }}) and the built-in${{ secrets.GITHUB_TOKEN }}for authentication, avoiding the exposure of hardcoded credentials. - [COMMAND_EXECUTION]: The workflows contain standard shell commands for development tasks like dependency installation (
npm ci,pip install), linting, and testing. These commands are executed within the controlled environment of a GitHub Actions runner. - [PROMPT_INJECTION]: No patterns associated with prompt injection, safety bypasses, or instruction overrides were detected in the documentation or templates.
Audit Metadata