{"id":46843480,"url":"https://github.com/ncode/yubikey-agent","last_synced_at":"2026-03-10T14:05:52.745Z","repository":{"id":140290810,"uuid":"315088374","full_name":"ncode/yubikey-agent","owner":"ncode","description":"yubikey-agent is a seamless ssh-agent for YubiKeys.","archived":false,"fork":false,"pushed_at":"2026-02-08T20:33:00.000Z","size":140,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-02-09T01:10:55.391Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"FiloSottile/yubikey-agent","license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ncode.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-22T17:02:14.000Z","updated_at":"2026-02-08T20:32:41.000Z","dependencies_parsed_at":"2025-12-01T02:04:05.982Z","dependency_job_id":null,"html_url":"https://github.com/ncode/yubikey-agent","commit_stats":null,"previous_names":[],"tags_count":7,"template":false,"template_full_name":null,"purl":"pkg:github/ncode/yubikey-agent","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ncode%2Fyubikey-agent","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ncode%2Fyubikey-agent/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ncode%2Fyubikey-agent/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ncode%2Fyubikey-agent/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ncode","download_url":"https://codeload.github.com/ncode/yubikey-agent/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ncode%2Fyubikey-agent/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30336122,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-10T12:41:07.687Z","status":"ssl_error","status_checked_at":"2026-03-10T12:41:06.728Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-03-10T14:05:52.297Z","updated_at":"2026-03-10T14:05:52.733Z","avatar_url":"https://github.com/ncode.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# (my personal version of) yubikey-agent\n\nThis is a fork of [filippo.io/yubikey-agent](https://filippo.io/yubikey-agent), a seamless `ssh-agent` for YubiKeys.\n\n## Key differences in this fork\n\n- **Multi-slot support**: configures all four main PIV slots with distinct PIN and touch policies.\n  - `9a` (PIV Authentication): PIN once, touch always\n  - `9c` (Digital Signature): PIN always, touch always\n  - `9d` (Key Management): PIN once, touch never\n  - `9e` (Card Authentication): PIN never, touch never\n- **Structured CLI**: uses Cobra subcommands (`setup`, `list`, `unblock`).\n\n## Core features inherited from the original project\n\n- **Easy to use**: one-command setup and one `SSH_AUTH_SOCK` export.\n- **Resilient**: tolerates unplugging, sleep, and suspend without restart.\n- **Compatible**: exposes standard SSH public keys usable across providers.\n- **Secure**: key material is generated on-device and remains non-exportable.\n\nWritten in pure Go, based on [github.com/go-piv/piv-go/v2](https://github.com/go-piv/piv-go/v2) and [golang.org/x/crypto/ssh](https://golang.org/x/crypto/ssh).\n\n## Installation\n\n```bash\ngo install github.com/ncode/yubikey-agent@latest\nyubikey-agent setup\n```\n\nThen add this to your shell profile (`~/.zshrc`, `~/.bashrc`, etc.):\n\n```bash\nexport SSH_AUTH_SOCK=\"${HOME}/.ssh/yubikey-agent.sock\"\n```\n\n## Service setup guides\n\n- Linux (`systemd`): `systemd.md`\n- macOS (`launchd`): `launchd.md`\n\n## Commands\n\n```bash\nyubikey-agent list     # List connected YubiKeys\nyubikey-agent setup    # Configure a YubiKey PIV applet for SSH\nyubikey-agent unblock  # Unblock/reset a locked PIN using the PUK\n```\n\n## Unblocking the PIN with the PUK\n\nIf the PIN is entered incorrectly three times, it becomes blocked.\n\n`yubikey-agent setup` sets the PUK to the same value as the PIN.\n\n```bash\nyubikey-agent unblock -s \u003cserial\u003e\n```\n\nIf the PUK is also entered incorrectly three times, recovery is not possible without resetting the PIV applet. To reset the applet and regenerate keys:\n\n`yubikey-agent setup --really-delete-all-piv-keys`\n\n## Platform notes\n\n- Linux and macOS are supported.\n- Windows support is currently work in progress.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fncode%2Fyubikey-agent","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fncode%2Fyubikey-agent","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fncode%2Fyubikey-agent/lists"}