thirdpass-github

GitHub repository extension for Thirdpass.

This repo contains the Thirdpass extension that understands GitHub repositories. It can be used by the Thirdpass CLI to resolve GitHub repositories, fetch release metadata, and prepare source workspaces for review from pinned tags or commits.

Package names

GitHub packages use the owner/repo form:

thirdpass review SeedSigner/seedsigner 0.8.7 --extension github

The extension also accepts common GitHub repository URLs, including https://github.com/owner/repo and git@github.com:owner/repo.git.

Artifact review

When no version is supplied, the extension resolves the repository's latest GitHub release. When a version is supplied, it can be a tag, a full commit SHA, or a tag with commit evidence in tag@sha-prefix form.

Prepared review workspaces are cloned from Git, checked out at the resolved commit, initialized with recursive submodules, stripped of Git metadata, and hashed for reusable review evidence.

Set GITHUB_TOKEN or GH_TOKEN to use authenticated GitHub API requests when resolving the latest release.