azure-kubernetes-app-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- Infrastructure Management Commands: The skill utilizes az and kubectl to interact with cloud infrastructure and cluster resources. These tools are required for detecting environments and applying deployment manifests.
- External Resource Access: It fetches container base images from official registries and uses established GitHub Actions for deployment workflows. These sources are standard providers for cloud-native resources.
- Secure Authentication Implementation: The skill emphasizes the use of Workload Identity and OIDC federation. This approach replaces long-lived credentials with short-lived tokens, reducing the risk of credential exposure.
- Compliance with Deployment Safeguards: Templates included in the skill are pre-configured to meet security benchmarks, such as running containers as non-root and dropping unnecessary Linux capabilities.
- Remote Software Installation: The deployment process includes a step to install the Gateway API from the official Kubernetes SIGs repository if it is not already present in the cluster.
Audit Metadata