dotnet-gha-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure patterns for CI/CD workflow composition. Key security features include: recommending explicit secret declarations over broad inheritance to limit exposure; using environment-specific protection rules and manual approval gates to secure deployment pipelines; and implementing shell script hardening using 'set -euo pipefail'. Additionally, the pattern for dynamic matrix generation uses 'jq' to sanitize and encode data extracted from project files, which effectively mitigates potential workflow injection risks.
Audit Metadata