skills.rest
boettiger-lab
boettiger-labOFFICIAL
Explore all skills by this author →
WebsiteGitHub

github-app-auth

Mint GitHub App installation tokens for authenticated git and gh operations.

4|1|Updated Feb 24, 2026
Search Tags:#git#authentication#github#gh-cli#secret-management#yubikey#app-auth
One-click install
npx skills add https://github.com/boettiger-lab/agent-skills --skill github-app-auth
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: github-app-auth
Source: https://github.com/boettiger-lab/agent-skills/tree/main/github-app-auth
Command: npx skills add https://github.com/boettiger-lab/agent-skills --skill github-app-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Authenticate to GitHub using the boettiger-lab-llm-agent GitHub App to mint installation tokens and enable secure git/gh workflows.

Core Features & Use Cases

  • Mint installation tokens and authenticate via the boettiger-lab GitHub App.
  • Perform git push/pull and gh CLI operations using the App identity without exposing personal credentials.
  • Support a full session workflow with gh-agent-unlock and gh-agent-lock to manage keys and credentials.

Quick Start

Run the gh-agent-unlock command to decrypt the App key and begin operating with git and gh under the boettiger-lab GitHub App.

Frequently Asked Questions about github-app-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I authenticate automated agents to push code using a GitHub App?▼

Mint installation tokens through a dedicated GitHub App to authenticate automated agents for pushing code and invoking gh CLI operations without exposing personal credentials.

What is the best way to use gh CLI securely within an automated workflow?▼

Using a GitHub App to mint installation tokens is the best way to use gh CLI securely, enabling App-scoped actions like commenting on PRs or issues without exposing personal credentials.

Do I need age-plugin-yubikey and openssl to establish a secure GitHub App session?▼

Yes, establishing a secure GitHub App session requires age-plugin-yubikey, age, openssl, jq, curl, and the encrypted key at the specified path to decrypt credentials and authorize actions.

How does the gh-agent-unlock command manage keys for GitHub authentication?▼

The gh-agent-unlock command decrypts the App key using age-plugin-yubikey to begin operating with git and gh under the GitHub App identity, while gh-agent-lock manages credential cleanup.

Can I comment on pull requests and issues using a GitHub App identity instead of a personal token?▼

Yes, you can comment on PRs and issues by minting installation tokens via a GitHub App, which authorizes automated agents to perform App-scoped actions instead of using personal tokens.

Related Skills

Explore More Software Engineering Skills→
ankraioankraio
26

ankra-sops-secrets

Encrypt Kubernetes Secrets in GitOps repos using SOPS with AGE.

Official
Advanced
jamesacarrjamesacarr

gh

Manage GitHub pull requests, issues, and CI runs via the gh CLI.

Community
Advanced
afel6afel6

github-repo-management

Manage GitHub repositories via gh CLI, git, and REST API.

Community
Advanced
bytetalentbytetalent

GitHub App vs OAuth App

Compare GitHub App and OAuth App for repository access decisions.

Official
Intermediate