deployment-patterns

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference guide for deployment strategies (Rolling, Blue-Green, Canary) and provides standard templates for Docker and GitHub Actions.
  • [SAFE]: Dockerfile examples implement security best practices by defining non-root users (USER appuser) and using specific version tags instead of latest.
  • [SAFE]: The CI/CD workflow examples use official and trusted GitHub Actions from the actions and docker organizations for checking out code, setting up environments, and building images.
  • [SAFE]: Environment configuration guidelines explicitly warn against hardcoding secrets and promote the use of secret managers and runtime validation using libraries like Zod.
  • [SAFE]: Health check implementations use standard tools like wget or internal language modules to probe local endpoints (localhost) for service availability.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 12:38 AM