Sign inSign up

sbx/gitguardian:latest

Multi-platform
Manifest digest

sha256:b27c66570687b15ed0b11c42876dacbb7828f7b9a40d3beed280c8ca4c934b30

Last pushed

32 minutes by sbx

Type

Sandbox Kit

Manifest digest

sha256:b27c66570687b15ed0b11c42876dacbb7828f7b9a40d3beed280c8ca4c934b30

OverviewSpec
MIXIN

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com and wires it as a Claude Code AI hook, so the agent's actions are scanned for hardcoded secrets automatically - the real key never enters the sandbox.

Arguments
NameRequiredDefaultDescription
versionOptional1.53.0

ggshield release to install

Provides[email protected]
CapabilitiesExpand a row to see its full configuration.
TypeRequiredDescription
com.docker.sandbox/network-policy@1Required—
com.docker.sandbox/credential@1RequiredGitGuardian API key (from a Personal or Service Account, "scan" scope). Stored on the host; the sandbox only sees a placeholder and the proxy injects the real value on requests to api.gitguardian.com.
com.docker.sandbox/lifecycle@1Required—
com.docker.sandbox/agent-context@1Required—
Requiresclaude

Apply this mixin to a sandbox

sbx run <agent> --kit sbx/gitguardian:latest

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠