gin-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements production-grade security best practices for containerization, specifically using multi-stage builds to minimize image size and utilizing Google's distroless images to reduce the attack surface.\n- [SAFE]: Deployment configurations enforce running as a non-root user (UID 65532) and utilize Kubernetes security contexts (readOnlyRootFilesystem, allowPrivilegeEscalation: false) to improve container isolation and runtime security.\n- [EXTERNAL_DOWNLOADS]: Fetches official container images for Go, PostgreSQL, Redis, and pgAdmin from trusted sources including Google Container Registry and Docker Hub.\n- [EXTERNAL_DOWNLOADS]: Installs widely-used development utilities such as Air for hot reloading and Migrate for database migrations from their respective official GitHub repositories using the Go toolchain.\n- [SAFE]: Configuration management follows the 12-factor app methodology, using environment variables and Kubernetes Secrets for sensitive data, ensuring that no actual credentials or secrets are hardcoded in the skill's source files.
Audit Metadata