Does this skill help with security in CI/CD logs?

Yes, the implementation patterns include commands like ::add-mask:: to ensure that generated tokens are automatically redacted from GitHub Actions logs.

What is the primary purpose of the JWT Authentication skill?

It is used to authenticate as a GitHub App (rather than a specific installation) to perform administrative tasks like listing installations or updating app metadata.

Can these JWTs be used to commit code to a repository?

No. JWTs are for app-level permissions only. To access repository content or create commits, you must use the JWT to request an installation access token.

How long do the generated JWTs last?

GitHub enforces a maximum expiration of 10 minutes for JWTs. This skill follows that security standard by setting short-lived expiration windows.

Which programming languages does this skill support?

The skill provides implementation patterns for the GitHub CLI (recommended), Node.js (using the jsonwebtoken library), and Python (using PyJWT).

JWT Authentication for GitHub Apps

Name: JWT Authentication for GitHub Apps
Author: adaptive-enforcement-lab

byadaptive-enforcement-lab

セキュリティとテスト

Generates JSON Web Tokens (JWTs) for GitHub App authentication, installation management, and discovery workflows.

概要

This skill provides specialized patterns and implementations for authenticating GitHub Apps using JSON Web Tokens (JWTs). It enables developers to perform app-level operations such as discovering installations, retrieving app metadata, and bootstrapping workflows by generating short-lived tokens. Supporting multiple implementation methods—including GitHub CLI, Node.js, and Python—the skill ensures that Claude can help you build secure, automated GitHub App integrations with built-in best practices like secret masking and expiration management.

主な機能

Workflow patterns for GitHub installation discovery and management
0 GitHub stars
Automated JWT generation for app-level GitHub authentication
Bootstrap logic for dynamic installation token generation
Support for GitHub CLI, Node.js (jsonwebtoken), and Python (PyJWT)
Security best practices for token masking and logging

ユースケース

Listing all accounts and organizations where a GitHub App is installed
Generating installation access tokens for repository-level CI/CD operations
Retrieving and managing GitHub App configuration and manifests

概要

主な機能

Workflow patterns for GitHub installation discovery and management
0 GitHub stars
Automated JWT generation for app-level GitHub authentication
Bootstrap logic for dynamic installation token generation
Support for GitHub CLI, Node.js (jsonwebtoken), and Python (PyJWT)
Security best practices for token masking and logging

ユースケース

Listing all accounts and organizations where a GitHub App is installed
Generating installation access tokens for repository-level CI/CD operations
Retrieving and managing GitHub App configuration and manifests