bun-docker

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and examples for Docker integration with the Bun runtime.
  • [SAFE]: Uses official and well-known container images from trusted sources (oven/bun, gcr.io/distroless, ubuntu, and postgres).
  • [SAFE]: Promotes security best practices, including the use of non-root users (USER bun, USER nobody), multi-stage builds to minimize attack surface, and .dockerignore to prevent accidental inclusion of sensitive files like .env.
  • [SAFE]: Configuration examples use standard placeholders for credentials (e.g., 'password') and demonstrate safe secret management using environment variables and .env files.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 06:53 PM
Security Audit — agent-trust-hub — bun-docker