bun-docker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard technical documentation and Dockerfile templates for the Bun runtime. It correctly implements security best practices including:
- Least Privilege: Using
USER bunandUSER nobodyto avoid running containers as root. - Supply Chain Security: Recommending
--frozen-lockfilefor consistent builds and external auditing tools for dependency scanning. - Data Exposure Prevention: Providing a comprehensive
.dockerignorefile to prevent sensitive files like.envand.gitfrom being included in the image layers. - Trusted Sources: All referenced Docker images (oven/bun, gcr.io/distroless, postgres, ubuntu) are from official and reputable vendors.
Audit Metadata