github-actions-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected in this skill.
- [EXTERNAL_DOWNLOADS]: The provided GitHub Action templates reference official actions from trusted organizations and well-known services (e.g., GitHub, AWS, HashiCorp, Docker, Astral, Codecov, Aqua Security). These are standard industry practices for CI/CD pipelines.
- [COMMAND_EXECUTION]: The skill includes standard build and test commands (pip, pytest, pyright, terraform, docker) within CI/CD workflow contexts. These are appropriate for the stated purpose of providing CI/CD patterns.
- [CREDENTIALS_UNSAFE]: The skill demonstrates the use of GitHub Secrets for managing sensitive information like AWS Role ARNs, which is a security best practice. A hardcoded connection string is provided for a localized test database service within the CI runner, which is standard for automated testing and does not expose production credentials.
Audit Metadata