apply

Apply changes to GitHub. By default, requires interactive confirmation before proceeding.

gh infra apply [path...]

Path

One or more paths can be given. When multiple paths are provided, manifests from all paths are collected and applied together.

Argument	Example	Behavior
(none) or .	gh infra apply	All *.yaml / *.yml in the current directory
File	gh infra apply repos/my-cli.yaml	That file only
Directory	gh infra apply repos/	All *.yaml / *.yml directly under it (subdirectories are ignored)
Multiple	gh infra apply repos/ files/	Manifests from all listed paths combined

Overlapping paths (e.g., . and ./repos/) are rejected to prevent duplicate processing.

YAML files that are not gh-infra manifests are silently skipped. Use --fail-on-unknown to treat them as errors.

Flags

Flag	Description
-r, --repo <owner/repo>	Target a specific repository
--auto-approve	Skip confirmation prompt
--force-secrets	Re-set all secrets (even existing ones)
--changed-since <ref>	Only the manifests changed since a git ref, and those that read a changed local file. See Only what changed
--fail-on-unknown	Error on YAML files with unknown Kind (default: silently skip)
--concurrency <n>	Maximum number of gh processes (GitHub API calls) at once, across the whole command. Default 8, or GH_INFRA_CONCURRENCY. Lower it if you hit GitHub’s secondary rate limit or network timeouts
-o, --output <format>	text (default) or json; json requires --auto-approve. See JSON output

Exit status

apply exits with 1 if any change fails, or if the current state of a repository could not be fetched. Repositories that could not be fetched are left out of the plan and are not applied; the other repositories are still applied.

Ctrl+C, SIGINT or SIGTERM stops the run. While changes are being applied, apply stops starting new ones, prints Interrupted. and exits with 1, since some changes may be applied already. Interrupted before that (while planning or at the prompt), nothing is applied and it exits with 0. A second Ctrl+C ends the process at once.

Interactive Diff Viewer

After the plan is displayed, the confirmation prompt says how many changes it applies to how many repositories, and offers three keys:

> Apply 13 changes to 3 repositories?  y yes   n no   d diff

Press d to open a full-screen diff viewer before deciding:

Key	Action
↑/↓ or j/k	Select file
Tab	Toggle apply/skip for the selected file
d/u	Scroll diff pane
q/Esc	Return to confirmation

Each file defaults to apply. Use Tab to toggle a file to skip if you want to exclude it from the current run. Skipped files are shown dimmed in the viewer. The YAML manifest is not modified — this is a runtime-only decision.

When you return to the confirmation prompt, any skipped files are shown as a summary:

  Skipped files (this run only):
    go.mod

> Apply 13 changes to 3 repositories?  y yes   n no   d diff

Examples

# Apply all changes
gh infra apply ./repos/

# Apply multiple directories at once
gh infra apply ./repos/ ./files/

# Apply without confirmation (for CI)
gh infra apply ./repos/ --auto-approve

# Force re-set secrets
gh infra apply ./repos/ --force-secrets

# Apply to a specific repository
gh infra apply ./repos/ --repo babarot/my-cli