opschain admin github-trust-policies update
integrations:github
Updates a trust policy by name or id. Pass only the fields to change;
the name and the connection are immutable. Enabling a disabled policy
re-checks the integrations:github entitlement; disabling never gates.
opschain admin github-trust-policies update payments-main --ref 'refs/heads/*'
Updated trust policy payments-main
Flags
| Flag | Meaning |
|---|---|
--server <url> | Server base URL (default: the active context / OPSCHAIN_SERVER). |
--auth-token <token> | Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login). |
--repository <pattern> | Repository claim predicate. |
--ref <pattern> | Git ref claim predicate. |
--environment <pattern> | GitHub environment claim predicate. |
--service-account <username> | The service account the minted token acts as. |
--token-ttl <seconds> | Minted token TTL, 60–3600 (0: 900, the short-lived default). |
--enabled | Whether the exchange matches against the policy (enabling re-checks the entitlement). |
--scope-prefix <path> | Replacement node path the exchanged session is clamped to; "" lifts the clamp. Sessions already minted keep the clamp they were minted with. |
See also
opschain docs cli/admin-github-trust-policies-show— the record after the change.