Why GitHub matters

GitHub is the main input for the platform. Without it you won’t get repository readiness scores, delivery metrics, or webhook-driven updates. Every workspace needs at least one GitHub App installation.

Once connected, the platform can list repos your app can see, queue readiness scans, and pick up PR and review activity.

Who can install the app

You need to be a GitHub org owner, or have permission to install apps on the org. If that’s not you, send this page to whoever administers GitHub and ask them to run the install, you’ll see the connection turn green when they’re done.

Connect during onboarding

1. Open the Integrations step in onboarding.
2. Click Connect GitHub.
3. On GitHub, pick the org and which repos to grant (all repos or a subset).
4. Click Install.
5. You’ll land back in the platform with the connection confirmed.

Connect later

Settings → Integrations → Connect next to GitHub. Same flow as above.

Change which repos are included

The app only sees repos you granted at install time. To add or remove repos:

1. GitHub → your org → Settings → GitHub Apps.
2. Configure on the AI Driven SDLC app.
3. Adjust repository access and save.

Changes usually show up in the platform within a few minutes.

What we actually read

Scans download a tarball snapshot of each repo’s file tree, run the rubric against it, and discard the copy. Webhooks tell us about PRs, reviews, and CI events. We don’t keep a copy of your source code sitting in a database.

Communication is HTTPS end-to-end with the GitHub App’s signed credentials.

If the connection breaks

Uninstalling the app or revoking access shows a warning in Settings → Integrations. Hit Reconnect and walk through install again.

Common issues

Repos missing after connect: Check the app is installed on the right org and that those repos were included in the access list (not just “selected repos” without the one you expect).

Status shows Error: The app was probably removed on GitHub. Reinstall from Integrations.

No scan after a day: Scans queue automatically (~24h). You can also kick one off manually from Agentic Foundation.