terraform-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard and secure infrastructure-as-code practices for project organization and module layout.
- [SAFE]: It explicitly advises against storing sensitive information in version-controlled files, promoting the use of dedicated secret managers.
- [SAFE]: The provided CI/CD workflow examples utilize OpenID Connect (OIDC) for identity federation, which eliminates the need for long-lived access keys.
- [SAFE]: All external GitHub Actions referenced in the examples are provided by official or well-known organizations including GitHub, AWS, and HashiCorp.
- [SAFE]: The infrastructure code snippets include security-oriented defaults such as encryption at rest and deletion protection for production resources.
Audit Metadata