GitHub authentication

Credential priority

Current credential resolution:

1. FUZIT_GITHUB_TOKEN2. GH_TOKEN3. GitHub CLI credential 4. anonymous access

Set the Fuzit-specific token:

PowerShell:

$env:FUZIT_GITHUB_TOKEN = "..."

POSIX:

export FUZIT_GITHUB_TOKEN="..."

Fallback:

export GH_TOKEN="..."

Fuzit does not accept a CLI --token argument.

Authentication command

fuzit auth status

Authenticate:

fuzit auth github

The GitHub CLI flow uses:

gh auth login --hostname github.com --web

when gh is installed.

Credential safety

Credential handles expose metadata such as:

authenticated
host
source

rather than the token itself.

Tokens are not intended to appear in:

• diagnostics;
• serialized result objects;
• error messages;
• CLI arguments;
• disk-persisted Fuzit state.

------------------------------------------------------------------------