
Product
Socket Now Supports pylock.toml Files
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
github.com/cli/go-gh
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Medium CVE
VulnerabilityContains a medium severity Common Vulnerability and Exposure (CVE).
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
High CVE
go-gh
is a collection of Go modules to make authoring GitHub CLI extensions easier.
Modules from this library will obey GitHub CLI conventions by default:
CurrentRepository()
respects the value of the GH_REPO
environment variable and reads from git remote configuration as fallback.
GitHub API requests will be authenticated using the same mechanism as gh
, i.e. using the values of GH_TOKEN
and GH_HOST
environment variables and falling back to the user's stored OAuth token.
Terminal capabilities are determined by taking environment variables GH_FORCE_TTY
, NO_COLOR
, CLICOLOR
, etc. into account.
Generating table or Go template output uses the same engine as gh.
The browser
module activates the user's preferred web browser.
See the full go-gh
reference documentation for more information
package main
import (
"fmt"
"log"
"github.com/cli/go-gh"
)
func main() {
// These examples assume `gh` is installed and has been authenticated
// Shell out to a gh command and read its output
issueList, _, err := gh.Exec("issue", "list", "--repo", "cli/cli", "--limit", "5")
if err != nil {
log.Fatal(err)
}
fmt.Println(issueList.String())
// Use an API helper to grab repository tags
client, err := gh.RESTClient(nil)
if err != nil {
log.Fatal(err)
}
response := []struct{
Name string
}{}
err = client.Get("repos/cli/cli/tags", &response)
if err != nil {
log.Fatal(err)
}
fmt.Println(response)
}
See examples for more demonstrations of usage.
If anything feels off, or if you feel that some functionality is missing, please check out our contributing docs. There you will find instructions for sharing your feedback and for submitting pull requests to the project. Thank you!
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.
Research
Security News
Malicious Ruby gems typosquat Fastlane plugins to steal Telegram bot tokens, messages, and files, exploiting demand after Vietnam’s Telegram ban.