mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-20 06:00:06 +08:00
74 lines
2.7 KiB
YAML
74 lines
2.7 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# Example provider profile. OpenShell does not load it; import it explicitly:
|
|
# openshell provider profile lint -f providers/copilot.yaml
|
|
# openshell provider profile import -f providers/copilot.yaml --global
|
|
#
|
|
# Copy and edit this file rather than importing it unchanged. `binaries` is the
|
|
# least-privilege control that decides which processes may reach the endpoints
|
|
# below, so it has to name the paths in *your* image.
|
|
#
|
|
# Client binaries: copilot.
|
|
# Reference layout: /usr/bin/copilot plus the npm global install under
|
|
# /usr/lib/node_modules/@github/copilot/**. That npm path is
|
|
# one reference image layout; check `npm root -g` in
|
|
# your image.
|
|
# Credential scope: COPILOT_GITHUB_TOKEN, GH_TOKEN or GITHUB_TOKEN, sent as a
|
|
# bearer authorization header to the Copilot API hosts below.
|
|
# Endpoint access: the githubcopilot.com API hosts (individual, business and
|
|
# enterprise variants) read-write and L7 enforced. The two
|
|
# telemetry hosts are L4 passthrough and do not receive the
|
|
# credential; drop them if your policy forbids telemetry.
|
|
# Smoke test: openshell sandbox create --provider <name> -- \
|
|
# copilot -p 'reply with OK'
|
|
|
|
id: copilot
|
|
display_name: GitHub Copilot
|
|
description: GitHub Copilot CLI and Copilot service APIs
|
|
category: agent
|
|
credentials:
|
|
- name: api_token
|
|
description: GitHub token used by Copilot
|
|
env_vars: [COPILOT_GITHUB_TOKEN, GH_TOKEN, GITHUB_TOKEN]
|
|
required: true
|
|
auth_style: bearer
|
|
header_name: authorization
|
|
discovery:
|
|
credentials: [api_token]
|
|
endpoints:
|
|
- host: api.githubcopilot.com
|
|
ports: [443]
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: api.individual.githubcopilot.com
|
|
ports: [443]
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: api.business.githubcopilot.com
|
|
ports: [443]
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: api.enterprise.githubcopilot.com
|
|
ports: [443]
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: copilot-proxy.githubusercontent.com
|
|
ports: [443]
|
|
protocol: rest
|
|
access: read-write
|
|
enforcement: enforce
|
|
- host: telemetry.enterprise.githubcopilot.com
|
|
ports: [443]
|
|
allow_uninspected_credentials: true
|
|
- host: default.exp-tas.com
|
|
ports: [443]
|
|
allow_uninspected_credentials: true
|
|
binaries:
|
|
- /usr/bin/copilot
|
|
- /usr/lib/node_modules/@github/copilot/node_modules/@github/**/copilot
|