sbx/gitguardian-kit:20260924-d058fedc156325f87612d9bcd9bd313ab74ba100

Manifest digest

sha256:4e0f80d80c90404e4ca2f112a8b9f6dbc6e0f119b651c100b27d2c015996c77a

Last pushed

9 days by dockerpublicbot

Type

Sandbox Kit

Manifest digest

sha256:4e0f80d80c90404e4ca2f112a8b9f6dbc6e0f119b651c100b27d2c015996c77a

Overview Spec

MIXIN

REQUIRES SECRETS

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com and wires it as a Claude Code AI hook, so the agent's actions are scanned for hardcoded secrets automatically - the real key never enters the sandbox.

Credentials

Name	Service	Required	Description
`GITGUARDIAN_API_KEY`	gitguardian	Required	GitGuardian API key (from a Personal or Service Account, "scan" scope). Stored on the host; the sandbox only sees a placeholder and the proxy injects the real value on requests to api.gitguardian.com.

Network Egress

github.com

objects.githubusercontent.com

release-assets.githubusercontent.com

api.gitguardian.com

Apply this mixin to a sandbox

sbx run <agent> --kit sbx/gitguardian-kit:20260924-d058fedc156325f87612d9bcd9bd313ab74ba100

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS

brew install docker/tap/sbx

Windows

winget install Docker.sbx

Learn more about docker sbx⁠