use curl to download release artifact from github private repository

download-github-artifact

# in order to download release artifacts from github, you have to first retreive the
# list of asset URLs using the github repo REST API. Use the asset URL to download 
# the artifact as a octet-stream data stream. You will need to get an access token 
# from "settings -> developer settings -> personal access tokens" on the github UI
#!/bin/bash -e

owner="MY_ORG_NAME"
repo="MY_REPO_NAME"
tag="ARTIFACT_TAG"
artifact="ARTIFACT_NAME"
token="MY_ACCESS_TOKEN"
list_asset_url="https://api.github.com/repos/${owner}/${repo}/releases/tags/${tag}?access_token=${token}"


# get url for artifact with name==$artifact
asset_url=$(curl "${list_asset_url}" | jq ".assets[] | select(.name==\"${artifact}\") | .url" | sed 's/\"//g')

# download the artifact
curl -vLJO -H 'Accept: application/octet-stream' \
     "${asset_url}?access_token=${token}"

It is also possible without PAT.

# Download the curl binary from https://api.github.com/moparisthebest/static-curl/

USER=moparisthebest \
REPO=static-curl \
GITHUB_API=https://api.github.com/repos/${USER}/${REPO}/releases/latest

ARCH=$(dpkg --print-architecture) 
echo "Querying GitHub for the latest $ARCH release" 
LATEST=$(curl -L -s -H 'Accept: application/json' $GITHUB_API) 
LATEST_TAG=$(echo $LATEST_CURL | jq -r '.tag_name') 
echo "Found version $LATEST_TAG" \
LATEST_URL=$(echo $LATEST | jq -r ".assets[] | select(.name | contains(\"$ARCH\")) | .url") 
echo "Downloading curl $LATEST_TAG from $USER" 
curl -vLJO -H 'Accept: application/octet-stream' $LATEST_URL

For Workflow Artifacts

I arrived here from Google looking for how to download GH Workflow Artifacts.

This will get the most recent.

gh auth login --with-token <<<$ACCESS_TOKEN
asset=$(gh api /repos/{user|org}/{repo}/actions/artifacts --jq ".artifacts[0] .archive_download_url")
curl -L -o artifact.zip "$asset" \
   -H "Accept: application/vnd.github.v3+json" \
   -H "Authorization: Bearer $ACCESS_TOKEN"

# unzip artifact.zip

This is what is used to select the first listed (latest).

.artifacts[0]

You can also filter on .artifacts[] to fetch by workflow run id, etc.

The payload from .artifacts[] looks like:

{
  "archive_download_url": "https://api.github.com/repos/{user|org}/{repo}/actions/artifacts/{artifact id}/zip",
  "created_at": "{iso date time string}",
  "expired": {bool},
  "expires_at": "{iso date time string}",
  "id": {artifact id},
  "name": "{artifact name}",
  "node_id": "{node id}",
  "size_in_bytes": {int},
  "updated_at": "{iso date time string}",
  "url": "https://api.github.com/repos/{user|org}/{repo}/actions/artifacts/{artifact id}",
  "workflow_run": {
    "head_branch": "{branch}",
    "head_repository_id": {repo id},
    "head_sha": "{sha}",
    "id": {workflow run id},
    "repository_id": {repo id}
  }
}

Which should be useful to get the artifact you're looking for.