跳到主要内容

Github 仓库管理

克隆/创建/复刻仓库;管理远程仓库、发布。

技能元数据

来源内置(默认安装)
路径skills/github/github-repo-management
版本1.1.0
作者Hermes Agent
许可证MIT
标签GitHub, Repositories, Git, Releases, Secrets, Configuration
相关技能github-auth, github-pr-workflow, github-issues

参考:完整 SKILL.md

信息

以下是 Hermes 在触发此技能时加载的完整技能定义。这是 Agent 在技能激活时看到的指令。

GitHub 仓库管理

创建、克隆、复刻、配置和管理 GitHub 仓库。每个部分先展示 gh 命令,再展示 git + curl 的备用方案。

前提条件

  • 已通过 GitHub 认证(参见 github-auth 技能)

设置

if command -v gh &>/dev/null && gh auth status &>/dev/null; then
AUTH="gh"
else
AUTH="git"
if [ -z "$GITHUB_TOKEN" ]; then
if [ -f ~/.hermes/.env ] && grep -q "^GITHUB_TOKEN=" ~/.hermes/.env; then
GITHUB_TOKEN=$(grep "^GITHUB_TOKEN=" ~/.hermes/.env | head -1 | cut -d= -f2 | tr -d '\n\r')
elif grep -q "github.com" ~/.git-credentials 2>/dev/null; then
GITHUB_TOKEN=$(grep "github.com" ~/.git-credentials 2>/dev/null | head -1 | sed 's|https://[^:]*:\([^@]*\)@.*|\1|')
fi
fi
fi

# Get your GitHub username (needed for several operations)
if [ "$AUTH" = "gh" ]; then
GH_USER=$(gh api user --jq '.login')
else
GH_USER=$(curl -s -H "Authorization: token $GITHUB_TOKEN" https://api.github.com/user | python3 -c "import sys,json; print(json.load(sys.stdin)['login'])")
fi

如果你已经在某个仓库内:

REMOTE_URL=$(git remote get-url origin)
OWNER_REPO=$(echo "$REMOTE_URL" | sed -E 's|.*github\.com[:/]||; s|\.git$||')
OWNER=$(echo "$OWNER_REPO" | cut -d/ -f1)
REPO=$(echo "$OWNER_REPO" | cut -d/ -f2)

1. 克隆仓库

克隆是纯 git 操作——两种方式效果相同:

# 通过 HTTPS 克隆(配合凭据助手或内嵌令牌的 URL)
git clone https://github.com/owner/repo-name.git

# 克隆到指定目录
git clone https://github.com/owner/repo-name.git ./my-local-dir

# 浅克隆(大型仓库更快)
git clone --depth 1 https://github.com/owner/repo-name.git

# 克隆特定分支
git clone --branch develop https://github.com/owner/repo-name.git

# 通过 SSH 克隆(如果已配置 SSH)
git clone git@github.com:owner/repo-name.git

使用 gh(简写):

gh repo clone owner/repo-name
gh repo clone owner/repo-name -- --depth 1

2. 创建仓库

使用 gh

# 创建公开仓库并克隆
gh repo create my-new-project --public --clone

# 私有仓库,带描述和许可证
gh repo create my-new-project --private --description "一个有用的工具" --license MIT --clone

# 在组织下创建
gh repo create my-org/my-new-project --public --clone

# 从已有本地目录创建
cd /path/to/existing/project
gh repo create my-project --source . --public --push

使用 git + curl

# 通过 API 创建远程仓库
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/user/repos \
-d '{
"name": "my-new-project",
"description": "一个有用的工具",
"private": false,
"auto_init": true,
"license_template": "mit"
}'

# 克隆它
git clone https://github.com/$GH_USER/my-new-project.git
cd my-new-project

# -- 或者 -- 将已有本地目录推送到新仓库
cd /path/to/existing/project
git init
git add .
git commit -m "初始提交"
git remote add origin https://github.com/$GH_USER/my-new-project.git
git push -u origin main

在组织下创建:

curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/orgs/my-org/repos \
-d '{"name": "my-new-project", "private": false}'

从模板创建

使用 gh

gh repo create my-new-app --template owner/template-repo --public --clone

使用 curl

curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/owner/template-repo/generate \
-d '{"owner": "'"$GH_USER"'", "name": "my-new-app", "private": false}'

3. Fork 仓库

使用 gh

gh repo fork owner/repo-name --clone

使用 git + curl

# 通过 API 创建 fork
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/owner/repo-name/forks

# 等待片刻让 GitHub 创建完成,然后克隆
sleep 3
git clone https://github.com/$GH_USER/repo-name.git
cd repo-name

# 将原始仓库添加为 "upstream" 远程
git remote add upstream https://github.com/owner/repo-name.git

保持 Fork 同步

# 纯 git — 随处可用
git fetch upstream
git checkout main
git merge upstream/main
git push origin main

使用 gh(快捷方式):

gh repo sync $GH_USER/repo-name

4. 仓库信息

使用 gh

gh repo view owner/repo-name
gh repo list --limit 20
gh search repos "machine learning" --language python --sort stars

使用 curl

# 查看仓库详情
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO \
| python3 -c "
import sys, json
r = json.load(sys.stdin)
print(f\"名称: {r['full_name']}\")
print(f\"描述: {r['description']}\")
print(f\"星标: {r['stargazers_count']} Fork: {r['forks_count']}\")
print(f\"默认分支: {r['default_branch']}\")
print(f\"语言: {r['language']}\")"

# 列出你的仓库
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
"https://api.github.com/user/repos?per_page=20&sort=updated" \
| python3 -c "
import sys, json
for r in json.load(sys.stdin):
vis = '私有' if r['private'] else '公开'
print(f\" {r['full_name']:40} {vis:8} {r.get('language', ''):10} ★{r['stargazers_count']}\")"

# 搜索仓库
curl -s \
"https://api.github.com/search/repositories?q=machine+learning+language:python&sort=stars&per_page=10" \
| python3 -c "
import sys, json
for r in json.load(sys.stdin)['items']:
print(f\" {r['full_name']:40} ★{r['stargazers_count']:6} {r['description'][:60] if r['description'] else ''}\")"

5. 仓库设置

使用 gh:

gh repo edit --description "Updated description" --visibility public
gh repo edit --enable-wiki=false --enable-issues=true
gh repo edit --default-branch main
gh repo edit --add-topic "machine-learning,python"
gh repo edit --enable-auto-merge

使用 curl:

curl -s -X PATCH \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO \
-d '{
"description": "Updated description",
"has_wiki": false,
"has_issues": true,
"allow_auto_merge": true
}'

# 更新话题
curl -s -X PUT \
-H "Authorization: token $GITHUB_TOKEN" \
-H "Accept: application/vnd.github.mercy-preview+json" \
https://api.github.com/repos/$OWNER/$REPO/topics \
-d '{"names": ["machine-learning", "python", "automation"]}'

6. 分支保护

# 查看当前保护设置
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/branches/main/protection

# 设置分支保护
curl -s -X PUT \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/branches/main/protection \
-d '{
"required_status_checks": {
"strict": true,
"contexts": ["ci/test", "ci/lint"]
},
"enforce_admins": false,
"required_pull_request_reviews": {
"required_approving_review_count": 1
},
"restrictions": null
}'

7. 密钥管理(GitHub Actions)

使用 gh:

gh secret set API_KEY --body "your-secret-value"
gh secret set SSH_KEY < ~/.ssh/id_rsa
gh secret list
gh secret delete API_KEY

使用 curl:

密钥需要使用仓库的公钥进行加密——通过 API 操作会更复杂一些:

# 获取仓库公钥用于加密密钥
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/secrets/public-key

# 加密并设置(需要安装 PyNaCl 的 Python 环境)
python3 -c "
from base64 import b64encode
from nacl import encoding, public
import json, sys

# 获取公钥
key_id = '<key_id_from_above>'
public_key = '<base64_key_from_above>'

# 加密
sealed = public.SealedBox(
public.PublicKey(public_key.encode('utf-8'), encoding.Base64Encoder)
).encrypt('your-secret-value'.encode('utf-8'))
print(json.dumps({
'encrypted_value': b64encode(sealed).decode('utf-8'),
'key_id': key_id
}))"

# 然后 PUT 加密后的密钥
curl -s -X PUT \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/secrets/API_KEY \
-d '<output from python script above>'

# 列出密钥(仅显示名称,值隐藏)
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/secrets \
| python3 -c "
import sys, json
for s in json.load(sys.stdin)['secrets']:
print(f\" {s['name']:30} updated: {s['updated_at']}\")"

注意:对于密钥管理,gh secret set 要简单得多。如果需要设置密钥但 gh 不可用,建议仅为此操作安装它。

8. 发布(Releases)

使用 gh:

gh release create v1.0.0 --title "v1.0.0" --generate-notes
gh release create v2.0.0-rc1 --draft --prerelease --generate-notes
gh release create v1.0.0 ./dist/binary --title "v1.0.0" --notes "Release notes"
gh release list
gh release download v1.0.0 --dir ./downloads

使用 curl:

# 创建一个发布
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/releases \
-d '{
"tag_name": "v1.0.0",
"name": "v1.0.0",
"body": "## 更新日志\n- 功能 A\n- 错误修复 B",
"draft": false,
"prerelease": false,
"generate_release_notes": true
}'

# 列出发布
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/releases \
| python3 -c "
import sys, json
for r in json.load(sys.stdin):
tag = r.get('tag_name', 'no tag')
print(f\" {tag:15} {r['name']:30} {'draft' if r['draft'] else 'published'}\")"

# 上传发布资产(二进制文件)
RELEASE_ID=<id_from_create_response>
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
-H "Content-Type: application/octet-stream" \
"https://uploads.github.com/repos/$OWNER/$REPO/releases/$RELEASE_ID/assets?name=binary-amd64" \
--data-binary @./dist/binary-amd64

9. GitHub Actions 工作流

使用 gh:

gh workflow list
gh run list --limit 10
gh run view <RUN_ID>
gh run view <RUN_ID> --log-failed
gh run rerun <RUN_ID>
gh run rerun <RUN_ID> --failed
gh workflow run ci.yml --ref main
gh workflow run deploy.yml -f environment=staging

使用 curl:

# 列出工作流
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/workflows \
| python3 -c "
import sys, json
for w in json.load(sys.stdin)['workflows']:
print(f\" {w['id']:10} {w['name']:30} {w['state']}\")"

# 列出最近的运行
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
"https://api.github.com/repos/$OWNER/$REPO/actions/runs?per_page=10" \
| python3 -c "
import sys, json
for r in json.load(sys.stdin)['workflow_runs']:
print(f\" Run {r['id']} {r['name']:30} {r['conclusion'] or r['status']}\")"

# 下载失败运行的日志
RUN_ID=<run_id>
curl -s -L \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/runs/$RUN_ID/logs \
-o /tmp/ci-logs.zip
cd /tmp && unzip -o ci-logs.zip -d ci-logs

# 重新运行失败的工作流
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/runs/$RUN_ID/rerun

# 仅重新运行失败的作业
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/runs/$RUN_ID/rerun-failed-jobs

# 手动触发工作流(workflow_dispatch)
WORKFLOW_ID=<workflow_id_or_filename>
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/repos/$OWNER/$REPO/actions/workflows/$WORKFLOW_ID/dispatches \
-d '{"ref": "main", "inputs": {"environment": "staging"}}'

10. Gists

使用 gh:

gh gist create script.py --public --desc "Useful script"
gh gist list

使用 curl:

# 创建一个 Gist
curl -s -X POST \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/gists \
-d '{
"description": "Useful script",
"public": true,
"files": {
"script.py": {"content": "print(\"hello\")"}
}
}'

# 列出你的 Gists
curl -s \
-H "Authorization: token $GITHUB_TOKEN" \
https://api.github.com/gists \
| python3 -c "
import sys, json
for g in json.load(sys.stdin):
files = ', '.join(g['files'].keys())
print(f\" {g['id']} {g['description'] or '(no desc)':40} {files}\")"

快速参考表

操作ghgit + curl
克隆gh repo clone o/rgit clone https://github.com/o/r.git
创建仓库gh repo create name --publiccurl POST /user/repos
Forkgh repo fork o/r --clonecurl POST /repos/o/r/forks + git clone
仓库信息gh repo view o/rcurl GET /repos/o/r
编辑设置gh repo edit --...curl PATCH /repos/o/r
创建发布gh release create v1.0curl POST /repos/o/r/releases
列出工作流gh workflow listcurl GET /repos/o/r/actions/workflows
重新运行 CIgh run rerun IDcurl POST /repos/o/r/actions/runs/ID/rerun
设置密钥gh secret set KEYcurl PUT /repos/o/r/actions/secrets/KEY (+ 加密)