parsed.json

{
  "default-src": [
    "'none'"
  ],
  "base-uri": [
    "'self'"
  ],
  "block-all-mixed-content": [],
  "connect-src": [
    "'self'",
    "uploads.github.com",
    "www.githubstatus.com",
    "collector.githubapp.com",
    "api.github.com",
    "www.google-analytics.com",
    "github-cloud.s3.amazonaws.com",
    "github-production-repository-file-5c1aeb.s3.amazonaws.com",
    "github-production-upload-manifest-file-7fdce7.s3.amazonaws.com",
    "github-production-user-asset-6210df.s3.amazonaws.com",
    "wss://live.github.com"
  ],
  "font-src": [
    "github.githubassets.com"
  ],
  "form-action": [
    "'self'",
    "github.com",
    "gist.github.com"
  ],
  "frame-ancestors": [
    "'none'"
  ],
  "frame-src": [
    "render.githubusercontent.com"
  ],
  "img-src": [
    "'self'",
    "data:",
    "github.githubassets.com",
    "identicons.github.com",
    "collector.githubapp.com",
    "github-cloud.s3.amazonaws.com",
    "*.githubusercontent.com",
    "customer-stories-feed.github.com"
  ],
  "manifest-src": [
    "'self'"
  ],
  "media-src": [
    "'none'"
  ],
  "script-src": [
    "github.githubassets.com"
  ],
  "style-src": [
    "'unsafe-inline'",
    "github.githubassets.com"
  ]
}

raw.txt

default-src 'none'; 
base-uri 'self'; 
block-all-mixed-content; 
connect-src 'self' uploads.github.com 
                   www.githubstatus.com 
                   collector.githubapp.com 
                   api.github.com 
                   www.google-analytics.com 
                   github-cloud.s3.amazonaws.com 
                   github-production-repository-file-5c1aeb.s3.amazonaws.com 
                   github-production-upload-manifest-file-7fdce7.s3.amazonaws.com 
                   github-production-user-asset-6210df.s3.amazonaws.com 
                   wss://live.github.com;
font-src github.githubassets.com; 
form-action 'self' github.com gist.github.com; 
frame-ancestors 'none'; 
frame-src render.githubusercontent.com; 
img-src 'self' data: github.githubassets.com 
                     identicons.github.com collector.githubapp.com 
                     github-cloud.s3.amazonaws.com 
                     *.githubusercontent.com customer-stories-feed.github.com; 
manifest-src 'self'; 
media-src 'none'; 
script-src github.githubassets.com; 
style-src 'unsafe-inline' github.githubassets.com