---
title: "github-repokit"
description: "Per-repository GitHub governance as Terragrunt, plus optional AWS OIDC and GCP WIF. Apply is human-gated. Does not write workflow YAML or manage the GitHub organization."
canonical: https://agentpluginsdirectory.com/plugins/github-repokit
last-updated: 2026-10-21
---

# github-repokit
Per-repository GitHub governance as Terragrunt, plus optional AWS OIDC and GCP WIF. Apply is human-gated. Does not write workflow YAML or manage the GitHub organization.
- Slug: github-repokit
- Publisher: Emre Cavunt
- Repository: https://github.com/emrecavunt/github-repokit
- Manifest: plugins/github-repokit/plugin.json
- Version: 0.1.0
- License: MIT
- Category (editorial): devops-cloud
- Skills: 4 (github-repokit-actions, github-repokit-aws-oidc, github-repokit-gcp-wif, github-repokit-repository)
- MCP servers: 1 (github)
- Stars: 0
- Repository created: 2026-08-30
- Repository last pushed: 2026-09-27
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/github-repokit
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What github-repokit does, in the publisher's words

Agent plugin for GitHub RepoKit: per-repo GitHub governance as Terragrunt, plus optional AWS OIDC and GCP WIF.

Install: see plugins/README.md. Skills live in skills/. Apply is human-gated. This plugin does not write workflow YAML.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/emrecavunt/github-repokit/HEAD/plugins/github-repokit/README.md

## Skills

- github-repokit-actions: Add or complete GitHub Actions environments and environment-scoped Actions variables with GitHub RepoKit (bootstrap/github/actions). Use when the user asks for GitHub environments, protected production environments, or Actions variables as Terragrunt, even if they do not say "repokit". Does not wr…
- github-repokit-aws-oidc: Add optional AWS IAM OIDC for GitHub Actions with GitHub RepoKit (bootstrap/aws/identity, modules/github-aws-oidc). Use when the user asks for AWS OIDC, an AWS_ROLE_ARN for Actions, or keyless AWS access from GitHub, even if they do not say "repokit". Do not run this skill unless the human asked f…
- github-repokit-gcp-wif: Add optional GCP Workload Identity Federation for GitHub Actions with GitHub RepoKit (bootstrap/gcp/identity, modules/github-wif-oidc). Use when the user asks for WIF, workload identity, GCP_WORKLOAD_IDENTITY_PROVIDER, or keyless GCP from GitHub, even if they do not say "repokit". Do not run this…
- github-repokit-repository: Add or complete per-repo GitHub governance with GitHub RepoKit (bootstrap/github/repository via Terragrunt): settings, teams, branch protection, CODEOWNERS. Use when the user asks to bootstrap a GitHub repository, add CODEOWNERS, branch protection, team access, or repository settings as code, even…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

## MCP servers

- github: transport: http; url: https://api.githubcopilot.com/mcp/

Read from the plugin's own mcp.json. Environment variable names only, never values.