docker-deployment
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The Docker Compose template in
SKILL.mdcontains hardcoded placeholder credentials. - Evidence:
POSTGRES_PASSWORD=password. - Evidence:
DATABASE_URL=postgresql://postgres:password@postgres:5432/myapp. - [EXTERNAL_DOWNLOADS]: The provided templates reference external resources including official Docker base images and GitHub Actions from well-known sources.
- Evidence: Pulls from
node:20-alpine,python:3.11-slim, andgcr.io/distroless/nodejs20-debian12. - Evidence: References
actions/checkout@v4,docker/login-action@v3, anddocker/build-push-action@v5which are from well-known or trusted organizations.
Audit Metadata