golang-continuous-integration
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs additional Go-specific skills from the author's repository (
https://github.com/samber/cc-skills-golang) during the AI code review workflow to provide the agent with specialized knowledge for focused reviews. - [COMMAND_EXECUTION]: Defines workflows that execute standard development lifecycle CLI tools including
go,git,golangci-lint,gh, andgoreleaserfor building, testing, and releasing Go code. - [CREDENTIALS_UNSAFE]: Correctly handles sensitive information by using GitHub Actions'
${{ secrets.SECRET_NAME }}syntax. The documentation explicitly warns against hardcoding credentials and provides instructions for secure secret management. - [SAFE]: Includes a dedicated security reference (
references/repo-security.md) educating users on branch protection rules, least-privilege workflow permissions, and securing fork pull requests to establish a trustworthy CI/CD foundation. - [SAFE]: The AI code review workflow processes untrusted data from pull request diffs. The prompt includes clear scoping and priority instructions to guide the agent, mitigating the risk of indirect prompt injection.
Audit Metadata