ci-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several GitHub Actions from well-known technology providers to automate build environments, including
astral-sh/setup-uv(Astral),oven-sh/setup-bun(Oven),golangci/golangci-lint-action(GolangCI), and official GitHub-maintained actions. These are standard tools for CI/CD workflows. - [COMMAND_EXECUTION]: Provides templates that execute standard development commands such as
go test,uv run pytest, andbun install. These commands are contained within the logic of CI/CD configuration files and are intended for automated test environments. - [CREDENTIALS_UNSAFE]: Includes hardcoded database credentials (e.g.,
POSTGRES_PASSWORD: test) for a PostgreSQL service container. This is a common and safe practice for local integration testing where the database is a transient instance running onlocalhostwithin the CI runner.
Audit Metadata