release-sidecar
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard development tools through shell commands to manage the release lifecycle.
- Executes
maketargets (e.g.,make release,make sync-deps,make install-status) to coordinate release steps. - Uses the GitHub CLI (
gh) to check CI status viagh run listand verify releases withgh release view. - Uses
gitfor tag management and history validation. - [EXTERNAL_DOWNLOADS]: Performs a verification step by installing the newly released binary directly from the author's repository.
- Executes
go install github.com/marcus/sidecar/cmd/sidecar@vX.Y.Zto verify the published package. - [CREDENTIALS_UNSAFE]: Mentions the requirement for a
HOMEBREW_TAP_TOKENto be present as a GitHub repository secret for the CI pipeline. It correctly instructs the user to ensure the secret exists in the environment rather than hardcoding any values.
Audit Metadata