cnb-cool-integration — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cnb-cool-integration (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
.cnb.yml(必选):基于用户目标生成或最小改动修改,并解释触发与并发关系(pipeline 并发 / stage 串行 / job 并发)。.cnb/web_trigger.yml:需要“手动触发按钮/参数/选择目标构建”时。.cnb/env/*.yml:需要复用环境变量或跨仓库 imports 时(见 references/env.md)。.coding-ci.yml),语法与变量机制(尤其 exports/imports、内置任务等)与本 CNB 有差异,应改用 coding-ci Skill。$ 兜底配置?push / pull_request / commit.add / web_trigger_* / schedule / api_trigger 等需要哪些?test/build/lint 命令。docker.image,还是 docker.build/docker.devcontainer?是否需要共享 volumes?cpus/mem/disk?是否需要 tags?node_modules / go / maven / npm cache)?是否需要跨节点缓存(docker:cache)?是否需要 exports 传参?docker build & push、部署、以及 web_trigger 按钮?.cnb.yml 结构<branch> -> <event> -> [pipelines](最直观)imports 或 YAML 锚点(见 references/cnb-yml.md、references/file-reference.md)stages 默认串行;stage 内 jobs 默认并发。<branch>/<event> 下多个 pipeline 并发,并共享相同 docker 环境与 runner(见 references/cnb-yml.md)。docker.volumes 缓存目录(copy-on-write,跨 stage 复制;见 references/cache.md)。docker:cache(见 references/cache.md)。$ 兜底。web_trigger_<button-id>(需要 .cnb/web_trigger.yml;见 references/web-trigger.md)。skip-cnb/skip-cnb: <stage> 跳过(见 references/trigger-rule.md、references/recipes.md)。volumes 挂载路径一致;需要跨节点则改用 docker:cache(见 references/cache.md)。login debug 配置加一段可登录 stage(见 references/debug.md)。.cnb.yml”:读 references/cnb-yml.md 与 references/docker-and-runner.mdreferences/trigger-rule.mdreferences/env.mdreferences/cache.mdreferences/web-trigger.mdreferences/debug.mdreferences/recipes.md~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.