Show HN: Ghbrk – Let AI agents run Git/gh without exposing SSH keys/API tokens

Category: security

Tags: credential-broker, security, ai-agents, git, policy-enforcement

Score: 6.8/10 (Innovation: 7, Technical: 7, Documentation: 7, Utility: 6)

Ghbrk is a credential broker daemon for AI coding agents that holds SSH keys and GitHub tokens securely, enforcing policy-controlled access to Git/gh operations. It solves the real problem of agents leaking credentials into context windows or logs, and its explicit proxy approach with policy enforcement is a thoughtful combination of security and agent workflow requirements.

Target audience: backend devs, devops, security engineers

Repository: https://github.com/marconae/ghbrk · Rust · MIT · 2 stars

View on Hacker News