ssdt-cicd-best-practices-2025
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes security best practices by explicitly advising against hardcoding credentials and recommending the use of Windows Authentication (Integrated Security) or managed secrets (GitHub Secrets/Azure Key Vault).
- [SAFE]: Instructions and YAML templates use standard infrastructure-as-code patterns for GitHub Actions and Azure DevOps Pipelines. Commands like
sqlpackageanddotnetare used in their expected contexts for database deployment and build validation. - [SAFE]: External references point to reputable sources, including official Microsoft documentation and the open-source tSQLt framework repository.
- [SAFE]: No obfuscation, prompt injection attempts, or unauthorized data access patterns were detected. The guidelines for file path formatting and documentation management are benign and aimed at improving agent operational reliability.
Audit Metadata