EXTENSIONS

GitHub Actions secret management via the local gh CLI. Supports repo-level, environment-scoped, and organization-scoped secrets with fan-out, code-search discovery, and a dry-run mode on the org-level setter. No PAT, GitHub App, or vault-held token required — auth comes from the operator's existing gh session.

GitHub pull-request and file-commit operations. Octokit-backed PR creation, merging, and fan-out across repos, plus gh-CLI-backed commitFile (branch creation + single-file commit) and openPullRequest (PR opening from an existing head→base pair) for one-shot file updates without a local checkout or token. dryRun supported on commitFile and openPullRequest.

GitHub models for swamp. Currently provides @hivemq/github/token, which audits a single GitHub token.

Inventory and report on OIDC trust policies and workload-identity federation across GitHub, Google Cloud, and Cloudflare One.

Reconcile GitHub/Graphite PR stacks with Linear issue states — scan PRs for ticket references, compare states, and transition Linear issues to match.

Query GitHub data using the gh CLI for repository, PR, issue, release, and workflow visibility.

GitHub resource models (repos, issues, PRs, members, Actions runs) using Octokit REST SDK

Track GitHub Actions workflow runs for a pull request — list latest runs and watch until completion via Octokit REST SDK

GitHub repository security auditing with support for native features and third-party tool detection

List GitHub pull requests via the gh CLI from swamp workflows.