nenadzaric/skills-integrations-github-integration repository overview

⁠github-integration

Recovered first-party workflow connector. Compatible legacy ports and exact tool identity are retained; optional dry-run defaults off.

⁠Exact immutable image

docker pull --platform linux/amd64 docker.io/nenadzaric/skills-integrations-github-integration@sha256:b2b6f804182c1a98b0ac69b00818e14e51b8057bfeb0a3a29c490e1f0e8fa5e8

Index digest: sha256:c278d6efb22a7003501a4b10fe1e9c0a904d61bfeb6ad5dc159665b4c496627f.

⁠Executable source and original notices

The immutable companion artifact contains github-integration/build-source/ (actual recovered executable source, Dockerfile, pinned dependencies, native fixture checks and safe workflow definitions), github-integration/notices/ (original baseline/dependency and installed runtime license/copyright payloads) and the image/source/proof hash index. Git development repositories are private; this public artifact provides the actual source instead. No customer configuration, credentials, generated TLS private keys or signed download URLs are included.

oras pull docker.io/nenadzaric/skills-integrations-github-integration@sha256:8ab6544fac13d25cce035b387dab88d3e54e12e6ed1a0d30a8269913f0f1c34c
sha256sum github-integration-source-notices.tar.gz

Expected archive SHA256: 567e3a293852847b75fcc9e6d49882e7f677e31e01183c6dc006cca64fe07b39. Extract and read github-integration/SOURCE-DELIVERY.txt and github-integration/notices/SOURCE-AND-NOTICES.json. Recipe/catalog delivery links and later release status can change without changing executable image bytes; the artifact preserves its build-source snapshot.

⁠Test scope and credentials

Positive and negative native tests used owned local mocks. Actual bounded private platform workflows ran the registered native dry-run and verified downloaded plan artifacts; these prove typed file flow and planning ONLY, not provider execution, permission or live account compatibility. No real provider requests, messages, tickets, pages or records were created. Production execution requires provider credentials with suitable scopes; bind through existing tenant secret references, never commit tokens or echo them in outputs.

cd github-integration/build-source
IMAGE=docker.io/nenadzaric/skills-integrations-github-integration@sha256:b2b6f804182c1a98b0ac69b00818e14e51b8057bfeb0a3a29c490e1f0e8fa5e8 sh tests/native.sh

Owned tests use network-none containers and synthetic loopback services. They are not authorization to send to real providers. Planning does not simulate all provider behavior (notably Slack/Telegram sends/media and Airtable JQ/update/link semantics). Existing retry logic is not an exactly-once guarantee after ambiguous writes.

⁠License scope

Original baseline MIT notices and dependency licenses remain unchanged. Recovery/packaging changes follow the existing workflows Proprietary first-party policy; this delivery makes no new license grant. Supplemental installed notices accompany the image; this is not an exhaustive SBOM or bit-reproducible binary claim. Python base/runtime components and Go/vendor/CA components retain their respective original terms.