gs-sst-infra
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The CI/CD configuration references official and trusted GitHub Actions, including
actions/checkout,pnpm/action-setup,actions/setup-node, andaws-actions/configure-aws-credentials. - [COMMAND_EXECUTION]: Implements standard command patterns for the SST framework such as
sst dev,sst deploy, andsst secret. Local development instructions use the officialamazon/dynamodb-localDocker image from a well-known service provider. - [CREDENTIALS_UNSAFE]: Demonstrates secure handling of credentials by advising the use of GitHub Secrets for AWS roles and providing examples of SST's native secret management rather than hardcoding sensitive data.
Audit Metadata