Repository navigation
Protect GitHub tutorial: host-scoped IdentityAgent, dashboard CA key, enterprise-level CA - #563
Merged
Merged
Conversation
Add an "Optional: Scope the agent to GitHub" section showing how to point only github.com connections at the Smallstep Agent's SSH socket with an IdentityAgent directive in ~/.ssh/config, leaving the default agent in place for other hosts. Moves the direnv/includeIf project-scoped note into that section and turns the alert into a pointer to it. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
tashian
enabled auto-merge
October 5, 2026 14:49
…e-level CA option The SSH user CA public key is now shown in the dashboard under Protect → SSH (web#3030), so lead with that and keep the step CLI as the alternative. Also note that the CA can be added at the GitHub Enterprise level instead of per organization. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
tashian
changed the title
dopey
approved these changes
Oct 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Implements EFF-941 (the issue is already marked Done, but the published doc never got the change) and the doc follow-up from EFF-231.
Brings the Protect GitHub with SSH Certificates guide up to date with the internal Notion version of the tutorial:
IdentityAgentdirective in aHost github.comblock of~/.ssh/config(macOS path shown; other platforms use the socket path from the table above it). The existingdirenv/includeIfproject-scoped note moves into this section.step ssh config --rootsas the alternative.updated_atbumped.Vale reports only pre-existing findings on untouched lines.
🤖 Generated with Claude Code