docker-cicd
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides examples that utilize official GitHub Actions from the Docker organization (e.g.,
docker/setup-buildx-action,docker/login-action,docker/metadata-action, anddocker/build-push-action). These are well-known, trusted resources for CI/CD pipelines. - [SAFE]: The skill includes explicit security and stability guidance, such as advising against hardcoding credentials, recommending OIDC for registry authentication, and suggesting image scanning with Docker Scout before pushing to production.
- [SAFE]: The instructions for Jenkins pipelines and local shell scripts follow standard development patterns for container orchestration and caching without introducing malicious persistence or privilege escalation mechanisms.
Audit Metadata