opschain admin github-trust-policies show

integrations:github

Shows one trust policy by name or id: the connection it trusts tokens from, its claim predicates, the service identity the minted token acts as, the token TTL and the scope prefix the session is clamped to (a dash when the service account's whole overlay applies).

opschain admin github-trust-policies show payments-main
Name:            payments-main
Connection:      corp-github
Repository:      my-org/*
Ref:             refs/heads/main
Environment:     *
Service account: gha-payments (0193…)
Token TTL:       900s
Scope prefix:    /projects/payments
Enabled:         true

Flags

Flag	Meaning
--server <url>	Server base URL (default: the active context / OPSCHAIN_SERVER).
--auth-token <token>	Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login).

See also

• opschain docs cli/admin-github-trust-policies-update — changing it.