ghbrk: Secure Git and GitHub CLI Access for AI Agents

🛠 ghbrk: Secure Git and GitHub CLI Access for AI Agents

Introducing ghbrk — a credential broker written in Rust that allows AI agents to perform remote operations via Git and the GitHub CLI (gh) without direct access to SSH keys or tokens. Access is regulated by YAML policies, and credentials are injected via a secure daemon only at the moment of command execution.

🌍 The tool solves a critical security problem in agentic engineering by preventing the leakage of privileged keys through the LLM context window.

👤 It enables the safe delegation of code writing and pushing to AI assistants while maintaining strict control over authorized repositories and branches.

Source 1: https://github.com/marconae/ghbrk