ci-pipeline

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several GitHub Actions from well-known technology providers to automate build environments, including astral-sh/setup-uv (Astral), oven-sh/setup-bun (Oven), golangci/golangci-lint-action (GolangCI), and official GitHub-maintained actions. These are standard tools for CI/CD workflows.
  • [COMMAND_EXECUTION]: Provides templates that execute standard development commands such as go test, uv run pytest, and bun install. These commands are contained within the logic of CI/CD configuration files and are intended for automated test environments.
  • [CREDENTIALS_UNSAFE]: Includes hardcoded database credentials (e.g., POSTGRES_PASSWORD: test) for a PostgreSQL service container. This is a common and safe practice for local integration testing where the database is a transient instance running on localhost within the CI runner.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 05:02 AM
Security Audit — agent-trust-hub — ci-pipeline