docker-kubernetes
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality DevOps best practices for Docker and Kubernetes, focusing on production-grade configuration.
- [SAFE]: Dockerfile examples implement multi-stage builds, non-root users, and minimal base images (Alpine, Slim, Scratch), which are security best practices.
- [SAFE]: Kubernetes templates include robust SecurityContext settings, such as
runAsNonRoot: true,readOnlyRootFilesystem: true, and dropping all capabilities (capabilities: drop: ["ALL"]). - [SAFE]: Manifests correctly utilize resource requests and limits, health checks (liveness, readiness, startup probes), and network policies to ensure cluster stability and security.
- [SAFE]: External references target well-known and trusted registries like GitHub Container Registry (ghcr.io) for image examples.
- [SAFE]: Credentials found in examples (e.g.,
user:passin connection strings) are clearly illustrative placeholders for development environments and do not represent actual secrets.
Audit Metadata