ci-cd-pipeline
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and templates for CI/CD workflows, emphasizing security principles such as least privilege, secret management, and automated security scanning.
- [EXTERNAL_DOWNLOADS]: The GitHub Actions template references standard, official actions from GitHub, Docker, and Aqua Security to perform build and scanning tasks. These references target reputable and well-known services.
- [CREDENTIALS_UNSAFE]: The skill explicitly warns against hardcoding secrets and demonstrates the correct use of GitHub's native secret management tools, such as the GITHUB_TOKEN and environment-specific secrets.
Audit Metadata