mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-12 04:39:51 +08:00
alangou
0d708d6d51
* fix(policy): gate uninspected credentialed endpoints Signed-off-by: Adrien Langou <alangou@nvidia.com> * refactor(cli): extract allowed-ip option parsing Signed-off-by: Adrien Langou <alangou@nvidia.com> * fix(policy): gate endpointless credential bindings Signed-off-by: Adrien Langou <alangou@nvidia.com> --------- Signed-off-by: Adrien Langou <alangou@nvidia.com>
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
id: copilot
|
|
display_name: GitHub Copilot
|
|
description: GitHub Copilot CLI and Copilot service APIs
|
|
category: agent
|
|
credentials:
|
|
- name: api_token
|
|
description: GitHub token used by Copilot
|
|
env_vars: [COPILOT_GITHUB_TOKEN, GH_TOKEN, GITHUB_TOKEN]
|
|
required: true
|
|
auth_style: bearer
|
|
header_name: authorization
|
|
discovery:
|
|
credentials: [api_token]
|
|
endpoints:
|
|
- host: api.githubcopilot.com
|
|
port: 443
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: api.individual.githubcopilot.com
|
|
port: 443
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: api.business.githubcopilot.com
|
|
port: 443
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: api.enterprise.githubcopilot.com
|
|
port: 443
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: copilot-proxy.githubusercontent.com
|
|
port: 443
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: telemetry.enterprise.githubcopilot.com
|
|
port: 443
|
|
allow_uninspected_credentials: true
|
|
- host: default.exp-tas.com
|
|
port: 443
|
|
allow_uninspected_credentials: true
|
|
binaries:
|
|
- /usr/bin/copilot
|
|
- /usr/lib/node_modules/@github/copilot/node_modules/@github/**/copilot
|