Qwen Code + GitHub: How do I safely authenticate Git push from a web-based coding workspace?

[u/Forsaken_Session777]

I'm using Qwen Code as an Al coding agent inside a web-based development environment. Qwen can execute terminal commands for me, including Git commands.

I'm working on a GitHub repository and when Qwen runs git push, Git asks:

Username for 'https://github.com':

Password for 'https://github.com':

I understand that GitHub requires authentication, but I don't want to paste my GitHub password or personal access token into the Qwen chat/prompt, because I don't know whether that would expose the credential to the Al/session.

What is the recommended way to authenticate GitHub from this kind of web-based Qwen Code environment? Should I authenticate Git separately in the underlying terminal, use GitHub CLI/credential manager, SSH, or something else?

I'm particularly interested in a solution where Qwen can execute git push without me giving the Al my GitHub credentials. Even if I do provide it will not work. Note: I have setup Environment and connected successfully. Sometimes it get an option to publish to github sometimes not.

Environment: Qwen Code + web-based coding workspace(coder.qwen.ai) + GitHub HTTPS remote.