菜单
Install the ghtkn CLI and verify downloaded release assets. Use when installing ghtkn via Homebrew, Scoop, aqua, go install, or GitHub Releases, or verifying assets with gh / slsa-verifier / Cosign.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Choose and configure where ghtkn stores access tokens (keyring, text, agent). Use when the OS keyring is unavailable (containers, microVMs), or when setting up the ghtkn agent backend.
Configure ghtkn via config file, environment variables, and CLI args. Use for configuration priority, disabling browser open, the GitHub account picker, enterprise GitHub App sharing, or GHTKN_GITHUB_TOKEN.
Understand how ghtkn works internally and how its tokens compare to alternatives. Use to explain the token workflow, compare with GitHub CLI OAuth / fine-grained PAT / installation tokens, or discuss API rate limits.
Configure ghtkn as a Git credential helper and switch GitHub Apps by repository owner. Use when setting up git authentication via ghtkn, handling fork repos, or troubleshooting the credential helper on macOS.
Configure and switch between multiple GitHub Apps in ghtkn. Use when setting up per-organization apps, selecting an app by argument or GHTKN_APP, or switching apps per directory with direnv.
Revoke leaked or compromised ghtkn access tokens. Use during incident response, when a token leaks, or to revoke an app's stored token via ghtkn revoke or the GitHub REST API.
| name | ghtkn-install |
| description | Install the ghtkn CLI and verify downloaded release assets. Use when installing ghtkn via Homebrew, Scoop, aqua, go install, or GitHub Releases, or verifying assets with gh / slsa-verifier / Cosign. |
ghtkn is a single Go binary; install it into your PATH. Common methods:
brew install suzuki-shunsuke/ghtkn/ghtkn --caskscoop bucket add suzuki-shunsuke https://github.com/suzuki-shunsuke/scoop-bucket && scoop install ghtknaqua g -i suzuki-shunsuke/ghtkn (aqua-registry >= v4.407.0)go install github.com/suzuki-shunsuke/ghtkn/cmd/ghtkn@latest$PATH.Release assets can be verified with GitHub CLI (gh attestation verify), slsa-verifier, or Cosign.
If this overview is enough, you don't need to read further.
For details on each method and asset verification, read reference.md in this skill directory.