nix-github-rate-limit

Use this skill before Nix commands that may fetch from GitHub.

Preferred path

Prefix the command with gh-nix; it reads the token from authenticated gh without putting it in the command:

gh-nix nix flake update
gh-nix nix run github:<owner>/<repo>
gh-nix nix run nixpkgs#<package> -- <args>
gh-nix nix build
gh-nix nix shell nixpkgs#<package> --command <command>
gh-nix , <command>

For this repo: gh-nix nix run .#build, gh-nix nix run .#switch, or gh-nix nix run .#update.

Check availability with command -v gh-nix. If it is unavailable, use an existing safe token source:

NIX_CONFIG="access-tokens = github.com=$(gh auth token)" nix <command>
NIX_CONFIG="access-tokens = github.com=$GITHUB_TOKEN" nix <command>
NIX_CONFIG="access-tokens = github.com=$(ghtkn get)" nix <command>

Never paste, print, persist, or commit tokens. If gh-nix reports that gh is unauthenticated, ask the user to run gh auth login. Retry a rate-limit failure once with gh-nix or the safest available fallback.