getRemoteURL()

// Default: read/write access, 1-year TTL
const url = await repo.getRemoteURL();

// Read-only access with 1-hour TTL
const readOnlyUrl = await repo.getRemoteURL({
  permissions: ["git:read"],
  ttl: 3600,
});

// CI/CD pipeline with extended permissions
const ciUrl = await repo.getRemoteURL({
  permissions: ["git:read", "git:write"],
  ttl: 86400, // 24 hours
});

// Disable force push on every branch
const safePushUrl = await repo.getRemoteURL({
  refPolicies: [{ pattern: "refs/heads/*", ops: ["no-force-push"] }],
});