guides
GitHub clone + PR
Clone with a token via env, push a branch, open a PR.
Pattern
1. Create sandbox with env.GH_TOKEN (or GITHUB_TOKEN)
2. git clone https://x-access-token:$GH_TOKEN@github.com/org/repo.git
3. Commit on a branch
4. git push and open a PR via gh or the GitHub API
Never put tokens in room ids, agent ids, or committed files. Prefer exec-time env overrides when rotating secrets.