The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references several GitHub Actions in references/ci-cd-pipelines.md from well-known and trusted providers including GitHub (actions/checkout, actions/setup-go, codeql-action), Docker (setup-buildx-action, login-action, metadata-action, build-push-action), Aqua Security (trivy-action), and Microsoft Azure (k8s-set-context). These are standard tools for secure CI/CD workflows.
[EXTERNAL_DOWNLOADS]: The Docker patterns in references/dockerfile-patterns.md utilize base images from the official Go repository and Google Container Registry (gcr.io/distroless), which are well-known and trusted sources.
[CREDENTIALS_SAFE]: The skill explicitly instructs against hardcoding credentials in references/constraints.md and demonstrates secure secret management in references/k8s-manifests.md using Kubernetes secretKeyRef and in GitHub Actions using secrets.GITHUB_TOKEN and secrets.KUBE_CONFIG.
[COMMAND_EXECUTION]: Shell commands provided in the Makefile and CI/CD pipelines are standard build and deployment operations (go test, docker build, kubectl set image) and do not contain any suspicious or arbitrary execution patterns.
[PRIVILEGE_ESCALATION]: The skill actively implements privilege reduction, such as using USER nonroot:nonroot in Dockerfiles and runAsNonRoot: true with dropped capabilities in Kubernetes manifests.

go-ops