durable-task-dotnet
Pass
Audited by Gen Agent Trust Hub on Feb 22, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE] (SAFE): The code snippets demonstrate retrieving sensitive configuration (connection strings) via environment variables (
DURABLE_TASK_SCHEDULER_CONNECTION_STRING) rather than hardcoding secrets. - [EXTERNAL_DOWNLOADS] (SAFE): Dependencies consist of official Microsoft NuGet packages (e.g.,
Microsoft.DurableTask.Client.AzureManaged) and Docker images from the Microsoft Container Registry (mcr.microsoft.com), which are considered trusted sources. - [COMMAND_EXECUTION] (SAFE): Provided shell commands are limited to standard Docker pull and run operations for a local development emulator.
- [DATA_EXPOSURE] (SAFE): No patterns of unauthorized file access or data exfiltration were found. The network communication described is standard protocol for the Durable Task framework communicating with its scheduler.
Audit Metadata