Sign inSign up

sbx/gitguardian:latest

Multi-platform
Manifest digest

sha256:586cd773446c1fd4f7d1627f2adf1f92d4979d59fc5f8c04a331732113e1414f

Last pushed

about 1 hour by sbx

Type

Sandbox Kit

Manifest digest

sha256:586cd773446c1fd4f7d1627f2adf1f92d4979d59fc5f8c04a331732113e1414f

OverviewSpec
MIXIN

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com and wires it as a Claude Code AI hook, so the agent's actions are scanned for hardcoded secrets automatically - the real key never enters the sandbox.

Arguments
NameRequiredDefaultDescription
versionOptional1.53.0

ggshield release to install

Provides[email protected]
CapabilitiesExpand a row to see its full configuration.
TypeRequiredDescription
com.docker.sandbox/network-policy@1Required—
com.docker.sandbox/credential@1RequiredGitGuardian API key (from a Personal or Service Account, "scan" scope). Stored on the host; the sandbox only sees a placeholder and the proxy injects the real value on requests to api.gitguardian.com.
com.docker.sandbox/lifecycle@1Required—
com.docker.sandbox/agent-context@1Required—
Requiresclaude

Apply this mixin to a sandbox

sbx run <agent> --kit sbx/gitguardian:latest

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠