bun-docker

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard technical documentation and Dockerfile templates for the Bun runtime. It correctly implements security best practices including:
  • Least Privilege: Using USER bun and USER nobody to avoid running containers as root.
  • Supply Chain Security: Recommending --frozen-lockfile for consistent builds and external auditing tools for dependency scanning.
  • Data Exposure Prevention: Providing a comprehensive .dockerignore file to prevent sensitive files like .env and .git from being included in the image layers.
  • Trusted Sources: All referenced Docker images (oven/bun, gcr.io/distroless, postgres, ubuntu) are from official and reputable vendors.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:01 AM
Security Audit — agent-trust-hub — bun-docker