bun-docker
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and examples for Docker integration with the Bun runtime.
- [SAFE]: Uses official and well-known container images from trusted sources (oven/bun, gcr.io/distroless, ubuntu, and postgres).
- [SAFE]: Promotes security best practices, including the use of non-root users (USER bun, USER nobody), multi-stage builds to minimize attack surface, and
.dockerignoreto prevent accidental inclusion of sensitive files like.env. - [SAFE]: Configuration examples use standard placeholders for credentials (e.g., 'password') and demonstrate safe secret management using environment variables and
.envfiles.
Audit Metadata