deployment-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for deployment strategies (Rolling, Blue-Green, Canary) and provides standard templates for Docker and GitHub Actions.
- [SAFE]: Dockerfile examples implement security best practices by defining non-root users (
USER appuser) and using specific version tags instead oflatest. - [SAFE]: The CI/CD workflow examples use official and trusted GitHub Actions from the
actionsanddockerorganizations for checking out code, setting up environments, and building images. - [SAFE]: Environment configuration guidelines explicitly warn against hardcoding secrets and promote the use of secret managers and runtime validation using libraries like Zod.
- [SAFE]: Health check implementations use standard tools like
wgetor internal language modules to probe local endpoints (localhost) for service availability.
Audit Metadata