Sign inSign up

sbx/gitguardian:1.53.0

Multi-platform
Manifest digest

sha256:0d660a0497b0bb50c03abff729685827ad3d025feae3ea39a03ef42002d97826

Last pushed

about 17 hours by sbx

Type

Sandbox Kit

Manifest digest

sha256:0d660a0497b0bb50c03abff729685827ad3d025feae3ea39a03ef42002d97826

OverviewSpec
MIXIN

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com and wires it as a Claude Code AI hook, so the agent's actions are scanned for hardcoded secrets automatically - the real key never enters the sandbox.

Arguments
NameRequiredDefaultDescription
versionOptional1.53.0

ggshield release to install

Provides[email protected]
CapabilitiesExpand a row to see its full configuration.
TypeRequiredDescription
com.docker.sandbox/network-policy@1Required—
com.docker.sandbox/credential@1RequiredGitGuardian API key (from a Personal or Service Account, "scan" scope). Stored on the host; the sandbox only sees a placeholder and the proxy injects the real value on requests to api.gitguardian.com.
com.docker.sandbox/lifecycle@1Required—
com.docker.sandbox/agent-context@1Required—
Requiresclaude

Apply this mixin to a sandbox

sbx run <agent> --kit sbx/gitguardian:1.53.0

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠