devops-deployment
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The development environment configuration contains hardcoded default credentials intended for local use.
- Evidence:
templates/docker-compose.ymlspecifiesPOSTGRES_PASSWORD: postgresandDATABASE_URL=postgresql://postgres:postgres@db:5432/app. - [EXTERNAL_DOWNLOADS]: The skill templates reference external GitHub Actions and Terraform modules from third-party repositories.
- Evidence:
templates/github-actions-pipeline.ymlusesaquasecurity/trivy-action@masterand several official Docker and GitHub actions. - Evidence:
templates/terraform-aws.tfreferences community-maintained modules fromterraform-aws-modulesvia the Terraform Registry. - [COMMAND_EXECUTION]: The CI/CD pipeline templates define shell commands for building, testing, and auditing the application code.
- Evidence:
templates/github-actions-pipeline.ymlincludes automated steps executingnpm ci,npm test, andnpm auditin an ephemeral runner environment.
Audit Metadata