Bun Docker

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official Docker images from 'oven/bun', 'postgres', and 'ubuntu', as well as Google's well-known 'gcr.io/distroless' registry. These are standard and trusted sources for containerization.- [COMMAND_EXECUTION]: Provides instructional shell commands and Dockerfile instructions for building and running Bun applications. All commands are standard for the described purpose.- [CREDENTIALS_UNSAFE]: Includes placeholder credentials like 'password' and generic connection strings in example configuration files for demonstration. No actual secrets are hardcoded.- [SAFE]: Specifically implements security best practices, including the use of 'USER bun' and 'USER nobody' to avoid running containers as root, and a '.dockerignore' template to prevent sensitive local files from being included in images.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 05:56 AM