google-cicd-terraform
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces a 'Safety First' execution protocol, requiring explicit manual review and confirmation before any infrastructure changes are applied via
terraform apply. - [SAFE]: Recommended identity management practices prioritize secure methods like GKE Workload Identity and additive IAM members (
google_project_iam_member) to prevent privilege escalation and accidental lockouts. - [EXTERNAL_DOWNLOADS]: Fetches provider version metadata from the official HashiCorp Terraform Registry, which is a well-known and trusted service.
- [SAFE]: Promotes the use of automated security scanning tools (Checkov, Trivy, Terrascan) to identify potential misconfigurations before they reach production.
Audit Metadata