GitHub

Read GitHub with a restricted token

What this profile grants

Files: Read the prepared runtime directory. No data directory.
API hosts: api.github.com
Environment variable names: GITHUB_PERSONAL_ACCESS_TOKEN
Resource settings: 512 MB memory · 1 hour session cap. Enforcement depends on the selected backend.

Use the maintained native binary with its --read-only option and a provider-side read-only token. An egress hostname rule alone does not limit GitHub operations; proxy support must be verified.