ci-cd-jenkins-rails
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands within Jenkinsfile templates (
shsteps). These are standard CI/CD operations (e.g.,bundle install,rspec,docker build) and do not process unsanitized user input or perform unauthorized actions. Evidence is found inSKILL.mdwithin thepipelineandstageblocks. - [SAFE_PRACTICE]: The skill strongly advocates for secure secrets management using the Jenkins Credentials store and
withCredentialswrapper, rather than hardcoding environment variables. Evidence inSKILL.mdunder 'Pattern 3: Credentials management'. - [SAFE_PRACTICE]: The skill explicitly warns against running jobs on the Jenkins controller (master) as a security risk, recommending Docker or Kubernetes agents instead. Evidence in
SKILL.mdunder 'Pattern 7: Agent strategy'. - [SAFE_PRACTICE]: The skill recommends using
brakemanandbundle-auditwithin the pipeline to detect security vulnerabilities in the Rails application and its dependencies. Evidence inSKILL.mdunder 'Pattern 1'.
Audit Metadata