Connect GitHub

Sentrail uses a GitHub App rather than a personal access token. You choose which repositories the installation can access. Sentrail requests short-lived installation tokens when it needs to read an authorized repository or create an approved draft remediation pull request.

1. 01

   Open Connections

   Open the project and choose its Connections or Integrations view.
2. 02

   Install the App

   Choose Connect GitHub App. In GitHub, select the account or organization and grant access to the repositories Sentrail should inspect.
3. 03

   Return to Sentrail

   After GitHub redirects back, refresh the available repository list if needed.
4. 04

   Link a repository

   Select an authorized repository and link it to the current Sentrail project.
5. 05

   Set the primary

   When multiple repositories are linked, choose the one that represents the main application codebase.

• Repository structure and sanitized file contents within the App installation's access.
• Security-sensitive auth, middleware, webhook, API, environment, and migration files.
• Known secret patterns, static-analysis findings, and dependency advisories.
• Push and pull-request commits for repositories with continuous monitoring enabled.
• The current default-branch commit before creating an approved remediation branch.

Normal audits are read-only. Sentrail creates a branch and draft pull request only after an authorized reviewer approves a concrete remediation proposal. Before writing, it re-checks the default branch commit. If the base moved after proposal generation, the operation stops and requires a fresh proposal.

• If a repository is missing, update the GitHub App installation's repository access, then refresh Sentrail.
• If access was revoked, reconnect or reinstall the App for the correct account.
• If a scan uses the wrong repository, verify the project's primary repository selection.
• If a remediation reports that the branch moved, regenerate the proposal against the latest base commit.