github-actions-for-sql
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- Identity-Based Authentication: The skill promotes the use of Azure Workload Identity (OIDC federation) for authentication. This is a secure pattern that eliminates the need to store database passwords or client secrets in GitHub Actions secrets.
- Official Resource Usage: The skill utilizes official GitHub Actions from the
azureorganization and themicrosoft.sqlpackagedotnet tool. These are recognized and maintained resources from trusted vendors. - Secure Credential Handling: It demonstrates using GitHub Environments to scope secrets and approvals, ensuring that deployments to production require explicit oversight and restricted identity tokens.
- Automated Firewall Management: The skill describes how
azure/sql-actiondynamically manages firewall rules to allow the GitHub runner access to the SQL server, reducing the attack surface by avoiding static 'allow all' rules.
Audit Metadata