dotnet-gha-build-test
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official and widely-trusted GitHub Actions for core CI functions, including
actions/setup-dotnet,actions/checkout,actions/cache, andactions/upload-artifact. - [SAFE]: Employs well-known third-party actions for specialized tasks such as test reporting (
dorny/test-reporter,EnricoMi/publish-unit-test-result-action) and code coverage (codecov/codecov-action,coverallsapp/github-action), which are standard in the .NET ecosystem. - [SAFE]: Demonstrates secure credential handling by using GitHub Secrets (
secrets.GITHUB_TOKEN,secrets.AZURE_ARTIFACTS_PAT,secrets.CODECOV_TOKEN) to authenticate with NuGet feeds and external reporting services. - [SAFE]: Includes shell script reliability and security best practices, such as the use of
set -euo pipefailin multi-line bash blocks to ensure pipeline failures are correctly detected and handled. - [SAFE]: Correctly identifies and documents security 'gotchas', such as the requirement for
--store-password-in-clear-texton Linux runners and the necessity of excluding secrets from version control.
Audit Metadata