docker/sbx-kit-gh:latest

schemaVersion: "3"
displayName: GitHub CLI
description: gh from nixpkgs, pinned by commit, as a self-contained overlay
sourceUrl: https://github.com/cli/cli
licenses:
    - MIT
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@2
      config:
        runtime:
            allow:
                - github.com
                - hosts:
                    - api.github.com
                  methods:
                    - GET
                    - HEAD
                    - POST
                    - PATCH
                    - PUT
                    - DELETE
                - hosts:
                    - uploads.github.com
                  methods:
                    - POST
                    - PUT
            deny:
                - hosts:
                    - api.github.com
                  methods:
                    - DELETE
                  paths:
                    - /repos/**
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: api.github.com
                  format: Bearer %s
                  header: Authorization
                - domain: uploads.github.com
                  format: Bearer %s
                  header: Authorization
                - domain: github.com
                  format: Bearer %s
                  header: Authorization
            name: GH_TOKEN
            proxyManaged: true
        phase:
            - runtime
        service: github
      description: GitHub API access for gh
    - type: com.docker.sandbox/agent-context@1
      optional: true
      config:
        content: |
            # GitHub CLI

            `gh` is on PATH at `/usr/local/bin/gh`.

            - Authentication is proxy-managed: `GH_TOKEN` is set to a sentinel and the
              real credential is injected on requests to github.com, api.github.com,
              and uploads.github.com. Never print or copy the token; it is not the
              real value anyway.
            - Do not run `gh auth login` — authentication already works.
            - Prefer `gh` over raw git for GitHub operations: `gh pr create`,
              `gh issue list`, `gh run watch`, `gh api` for anything without a
              dedicated subcommand.
    - type: com.docker.sandbox/agent-context@2
      optional: true
      config:
        content: |
            # GitHub CLI

            `gh` is on PATH at `/usr/local/bin/gh`.

            - Authentication is proxy-managed: `GH_TOKEN` is set to a sentinel and the
              real credential is injected on requests to github.com, api.github.com,
              and uploads.github.com. Never print or copy the token; it is not the
              real value anyway.
            - Do not run `gh auth login` — authentication already works.
            - Prefer `gh` over raw git for GitHub operations: `gh pr create`,
              `gh issue list`, `gh run watch`, `gh api` for anything without a
              dedicated subcommand.
dockerfile: gh.dockerfile