deployment-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats identified. The content is instructional documentation for DevOps and software engineering practices.
- [EXTERNAL_DOWNLOADS]: The skill references official Docker base images (Node.js, Go, Python, Alpine) and well-known GitHub Actions (actions/checkout, docker/build-push-action). These are standard industry tools from trusted sources.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The documentation follows best practices by instructing users to use environment variables for secrets and explicitly warns against storing secrets in code or Docker images.
- [COMMAND_EXECUTION]: Example commands for Docker, CI/CD, and deployment tools (kubectl, vercel, railway) are standard for the described tasks. The Docker examples emphasize security best practices, such as using non-root users and pinned version tags.
Audit Metadata