GitHub Integration

Pensar Console integrates with GitHub to scan and secure your repositories. The integration uses a GitHub App to provide secure access to your code without requiring personal access tokens.

Prerequisites

Before connecting GitHub, ensure you have:

1. A GitHub account with access to the repositories you want to scan
2. Organization owner or admin access (if installing on an organization)

Connecting GitHub

From Workspace Settings

1. Navigate to Settings → Integrations → Source control in your Pensar Console workspace
2. Find the GitHub row
3. Click Connect (or Add Account to connect an additional organization)
4. A popup window will open to GitHub’s app installation page
5. Select the organization or user account where you want to install the app
6. Choose to install on all repositories or select specific repositories
7. Click Install
8. You’ll be automatically redirected back to Pensar Console

Direct Installation

You can also install the Pensar GitHub App directly from GitHub:

1. Visit github.com/apps/pensarapp
2. Click Install
3. Select the organization or user account where you want to install the app
4. Choose your repository access preferences
5. Click Install

From Onboarding

When creating a new workspace, you’ll be prompted to connect GitHub during the onboarding process. Simply follow the same steps above.

Permissions

The Pensar GitHub App requests the following permissions:

Adding Repositories

After the app is installed, attach repositories directly to your workspace:

1. Go to Attack Surface → Repositories in Pensar Console
2. Click Add repository
3. Your GitHub repositories appear in the picker — select one or more
4. Click Attach & continue

Each repository you attach is connected to the workspace and recon / attack-surface analysis launches automatically — there is no separate project to create. You can optionally add credentials in the next step, then return to the repository list where a toast links you to the analysis progress.

Syncing Findings as Issues

Pensar can file each security finding as a GitHub issue in your repository and keep its state in sync. Unlike Linear and Notion, this needs no separate connection — it runs on the GitHub App installation you already have.

Enabling Sync

1. Navigate to Settings → Integrations → Issue tracking
2. Find the Issue sync card and locate the GitHub Issues section
3. Turn on Sync to GitHub and set a Severity Filter

What Gets Synced

Once enabled, Pensar files each matching finding as a GitHub issue:

• The issue title is prefixed with [Pensar Security]
• The body includes the severity, description, affected location, CWE classification, and a direct link back to the finding in the Pensar Console
• Three labels are applied: security, pensar, and severity:<level>

Where Issues Are Filed

Issues are filed into the workspace’s GitHub-connected repository — the first repository attached to the workspace with an App installation.

Per-repository settings still apply to whether a finding is filed and at what severity:

Backfilling Existing Findings

Turning on sync only affects findings discovered from that point on. To file findings you already have, use Sync existing findings in the Issue sync card. Pensar files every open finding that meets the routing and severity rules, skipping any that already has a linked GitHub issue.

Two-Way Status Sync

When a finding’s status changes in Pensar, the linked issue is updated:

GitHub has no in-progress state for issues, so a finding in review stays open.

Changes made in GitHub flow back the same way, through the App’s webhook:

Managing Installations

Viewing Connected Accounts

1. Navigate to Settings → Integrations → Source control
2. Find the GitHub row
3. You’ll see all connected GitHub accounts and organizations

Adding More Accounts

Click Add Account in the GitHub row to connect additional GitHub organizations or user accounts.

Modifying Repository Access

To change which repositories Pensar can access:

1. Go to your GitHub organization or account settings
2. Navigate to Installed GitHub Apps
3. Find Pensar and click Configure
4. Update the repository access settings
5. The changes will be reflected in Pensar Console automatically

Removing an Installation

To disconnect a GitHub account:

1. Go to your GitHub organization or account settings
2. Navigate to Installed GitHub Apps
3. Find Pensar and click Configure
4. Scroll down and click Uninstall

Troubleshooting

Installation Pending Approval

If you see “Installation pending approval”, it means you requested to install the app on an organization where you’re not an admin. An organization owner will need to approve the installation.

Repositories Not Appearing

If your repositories don’t appear in the Add repository picker:

1. Verify the GitHub App is installed on the correct organization
2. Check that the app has access to the specific repository
3. Ensure you have at least read access to the repository on GitHub

Permission Errors

If you see permission errors when scanning:

1. Verify the GitHub App has the required permissions listed above
2. Ensure the app is installed on the repository you’re trying to scan
3. Check that the installation hasn’t been suspended

Need Help?

If you encounter issues setting up your GitHub integration, please contact our support team at team@pensar.dev.