container-native-deployment
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed best practices for OCI and GraalVM native image deployment, specifically instructing the agent to avoid common security pitfalls like baking credentials into images or running as a root user.
- [SAFE]: Included examples compare insecure and secure Dockerfile patterns. A dummy credential in the 'bad-dockerfile' example serves an educational purpose to illustrate insecure practices and is treated as a placeholder rather than a real-world credential exposure.
- [SAFE]: Documentation links and base image references (Eclipse Temurin) target well-known, official sources in the Java and Spring Boot ecosystems.
Audit Metadata