GitHub CLI (gh)

Comprehensive reference for GitHub CLI (gh) - work seamlessly with GitHub from the command line.

Version: 2.85.0 (current as of January 2026)

Security Best Practices (Critical)

IMPORTANT: Read these security guidelines before using gh CLI commands.

Token and Authentication Security

• Never store tokens in plain text or share them
• Avoid using --insecure-storage except in isolated/test environments
• When using --with-token < token.txt, ensure the token file has restricted permissions (chmod 600)
• Use environment variable GH_TOKEN with caution; tokens can be visible in process listings
• Never commit tokens to version control
• Rotate tokens regularly and revoke unused tokens
• Always restrict variable scope; unset tokens after use and avoid variable reuse across scripts to reduce leakage risk