attest Connect GitHub
Create and install your own GitHub App.
Create the app
From the protected administrator interface, open GitHub integration. Start the creation flow for your GitHub account or organization, continue to GitHub, then return through the callback in the same browser session. Select the intended installation account and repositories.
The setup flow creates a customer-owned GitHub App. It uses a stable HTTPS origin and a signed webhook endpoint; the callback and webhook must reach your instance. Keep the App private unless wider installation is needed.
Use Test connection for a connected repository. It verifies installation identity, membership and a scoped pull-request read token; it does not run the browser or test the model. Newly connected repositories begin with QA Disabled.
Permissions and operation
Attest needs GitHub permissions to read relevant pull request and preview metadata and publish Checks and summaries. Review the exact manifest presented during setup; optional comment permissions and GitHub behavior depend on the installed App and current implementation.
If setup fails, restart the flow rather than reusing an expired callback. Protect the instance encryption key and App credentials. See troubleshooting and first run.