ci-cd-github-actions-rails
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements and recommends industry-standard security best practices for CI/CD environments, including OIDC for cloud authentication and automated security scanning with Brakeman and CodeQL.
- [SAFE]: All external dependencies are official or well-known GitHub Actions, such as actions/checkout, ruby/setup-ruby, and aws-actions/configure-aws-credentials.
- [SAFE]: The skill includes explicit warnings regarding security risks, such as the dangers of pull_request_target triggers and the importance of secret management.
- [SAFE]: No hardcoded sensitive credentials, data exfiltration patterns, or obfuscated code were detected.
Audit Metadata