git-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses standard git commands for repository management and gh (GitHub CLI) for creating pull requests.
- [SAFE]: Enforces GPG signing for all commits and prohibits the use of --no-gpg-sign, ensuring commit authenticity.
- [SAFE]: Implements a safe file deletion policy by requiring files to be stashed before deletion, providing a recovery mechanism.
- [SAFE]: Recommends the use of secrets scanning tools (e.g., git-secrets) to prevent accidental exposure of credentials in the repository history.
- [SAFE]: Analyzes repository metadata through git log and diff commands to maintain consistency in commit message language and style.
Audit Metadata