gs-sst-infra

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The CI/CD configuration references official and trusted GitHub Actions, including actions/checkout, pnpm/action-setup, actions/setup-node, and aws-actions/configure-aws-credentials.
  • [COMMAND_EXECUTION]: Implements standard command patterns for the SST framework such as sst dev, sst deploy, and sst secret. Local development instructions use the official amazon/dynamodb-local Docker image from a well-known service provider.
  • [CREDENTIALS_UNSAFE]: Demonstrates secure handling of credentials by advising the use of GitHub Secrets for AWS roles and providing examples of SST's native secret management rather than hardcoding sensitive data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 11:30 PM