gitlab-ci-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Defines patterns for executing various CLI tools including
kubectl,terraform,docker, andnpmwithin GitLab CI/CD pipeline stages. - [COMMAND_EXECUTION]: Includes a deployment template that utilizes the
--insecure-skip-tls-verify=trueflag for Kubernetes cluster configuration, which bypasses SSL certificate validation. - [SAFE]: Implements secure handling of sensitive data by utilizing CI/CD environment variables for credentials such as
$CI_REGISTRY_PASSWORDand$KUBE_TOKEN. - [SAFE]: References official and well-known Docker images from trusted providers including HashiCorp, Bitnami, and Aqua Security.
- [PROMPT_INJECTION]: Includes a pattern for dynamic child pipelines where a Python script generates pipeline configuration at runtime, which represents a potential surface for indirect prompt injection if processing untrusted input.
Audit Metadata