gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly enforces the use of Workload Identity Federation (WIF) for authentication, which is a significant security improvement over using static service account JSON keys that are prone to leakage.
- [SAFE]: All external references in the provided GitHub Actions workflows and Dockerfiles point to official, well-known, and trusted sources, such as the 'google-github-actions' organization and official language runtimes.
- [SAFE]: The instructions and code templates demonstrate secure coding practices, including structured logging, health check implementations, and graceful shutdown handling via SIGTERM.
- [SAFE]: No obfuscated code, hidden URLs, or malicious persistence mechanisms were found; code samples for processing external data (Pub/Sub and Storage events) follow standard, safe patterns.
- [SAFE]: The skill includes an 'Anti-Patterns Checklist' that actively guides the user to avoid common security pitfalls like privileged container execution or exposing secrets in environment variables.
Audit Metadata