97

I heard that there was a public URL for all users on github where you can access their public keys or they can supply that URL of all their public keys. Is this true? If so what is that URL. Does it exist for bitbucket as well?

5 Answers 5

166

You can get with:

curl https://github.com/<username>.keys

Replace <username> with the actual username of the GitHub user.

This is useful when you set login permission to other servers. Just save its output into ~/.ssh/authorized_keys. To append it to the end from the command line:

curl https://github.com/<username>.keys | tee -a ~/.ssh/authorized_keys

It can also be done using Github API

curl -i https://api.github.com/users/<username>/keys

For bit bucket you can use the following: (This call requires authentication.)

curl -i https://bitbucket.org/api/1.0/users/<accountname>/ssh-keys
9
  • If I know a git public key URL, how can I get access or clone the repository?
    – Hà Link
    Oct 9, 2015 at 2:29
  • 1
    This also works for enterprise versions of github. e.g. <enterprise url>/<username>.keys Jun 30, 2017 at 18:13
  • 2
    @holmb, according to the latest documentation, this endpoint requires authentication. I think this changed over time, I can't recall it being so when I first posted this answer. confluence.atlassian.com/bitbucket/…{accountname}/ssh-keys
    – frazras
    Mar 7, 2018 at 16:58
  • 1
    @fazras: Please do update the answer regarding BitBucket's change. Thanks.
    – Jumper
    May 18, 2018 at 8:35
  • 1
    @dzieciou I'm not a GitHub admin but it sounds like something that might be disabled in some orgs. It still is open in our enterprise GitHub. Jun 8, 2021 at 14:14
42

GPG public keys are now available at https://github.com/<username>.gpg

9

Works for gitlab same way too.

https://gitlab.com/<username>.keys

Works nicely in bash scripts too.

#GitProvider to fetch public keys (gitlab.com,github.com)
GitProvider="gitlab.com"
GitUsername="username"
curl https://${GitProvider}/${GitUsername}.keys | tee -a ~/.ssh/authorized_keys
9

In addition these also provide a way to retrieve a user's PGP keys:

GitHub:

https://github.com/USER.keys
https://gitlab.com/USER.gpg

GitLab:

https://gitlab.com/USER.keys
https://gitlab.com/USER.gpg
-2

While the keys are public you don't always want to reveal your internal hostnames from the default comment fields, so I'd recommend ssh-copy-id command if you have SSH password access, wormhole when on console and configuration management tools (like Ansible, Puppet etc) in the first place.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.