gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code and configuration for GCP Cloud Run and Cloud Run Functions following industry standards.
- [SAFE]: Implements container security best practices including multi-stage Docker builds to reduce attack surface and the use of the
USER nodedirective to ensure the application runs with least privilege. - [SAFE]: Recommends the use of official and well-known container images from Google's Container Registry (
gcr.io/cloud-builders/docker,gcr.io/google.com/cloudsdktool/cloud-sdk, andgcr.io/distroless/nodejs20-debian12) for builds and deployments.
Audit Metadata