Integrations

GitHub

GitHub Integration

Pensar Console integrates with GitHub to scan and secure your repositories. The integration uses a GitHub App to provide secure access to your code without requiring personal access tokens.

Prerequisites

Before connecting GitHub, ensure you have:

  1. A GitHub account with access to the repositories you want to scan
  2. Organization owner or admin access (if installing on an organization)

Connecting GitHub

From Workspace Settings

  1. Navigate to Settings → Integrations → Source control in your Pensar Console workspace
  2. Find the GitHub row
  3. Click Connect (or Add Account to connect an additional organization)
  4. A popup window will open to GitHub’s app installation page
  5. Select the organization or user account where you want to install the app
  6. Choose to install on all repositories or select specific repositories
  7. Click Install
  8. You’ll be automatically redirected back to Pensar Console

Direct Installation

You can also install the Pensar GitHub App directly from GitHub:

  1. Visit github.com/apps/pensarapp
  2. Click Install
  3. Select the organization or user account where you want to install the app
  4. Choose your repository access preferences
  5. Click Install

From Onboarding

When creating a new workspace, you’ll be prompted to connect GitHub during the onboarding process. Simply follow the same steps above.

You can connect multiple GitHub accounts or organizations to the same workspace. This is useful if your code is spread across different GitHub organizations.

Permissions

The Pensar GitHub App requests the following permissions:

PermissionAccess LevelPurpose
ContentsRead & WriteRead repository code for scanning, create auto-remediation commits
Pull requestsRead & WriteCreate and manage pull requests for security fixes
ChecksRead & WriteReport scan status and results on pull requests
ActionsRead & WriteIntegrate with GitHub Actions workflows

When you add repositories, the picker notes that the GitHub App is installed with read-only browsing access — you choose exactly which repositories it can see. The write-level permissions above are only exercised when you opt into auto-remediation (commits and pull requests) for a repository.

Adding Repositories

After the app is installed, attach repositories directly to your workspace:

  1. Go to Attack Surface → Repositories in Pensar Console
  2. Click Add repository
  3. Your GitHub repositories appear in the picker — select one or more
  4. Click Attach & continue

Each repository you attach is connected to the workspace and recon / attack-surface analysis launches automatically — there is no separate project to create. You can optionally add credentials in the next step, then return to the repository list where a toast links you to the analysis progress.

Managing Installations

Viewing Connected Accounts

  1. Navigate to Settings → Integrations → Source control
  2. Find the GitHub row
  3. You’ll see all connected GitHub accounts and organizations

Adding More Accounts

Click Add Account in the GitHub row to connect additional GitHub organizations or user accounts.

Modifying Repository Access

To change which repositories Pensar can access:

  1. Go to your GitHub organization or account settings
  2. Navigate to Installed GitHub Apps
  3. Find Pensar and click Configure
  4. Update the repository access settings
  5. The changes will be reflected in Pensar Console automatically

Removing an Installation

To disconnect a GitHub account:

  1. Go to your GitHub organization or account settings
  2. Navigate to Installed GitHub Apps
  3. Find Pensar and click Configure
  4. Scroll down and click Uninstall

Removing a GitHub installation will prevent Pensar from scanning repositories in that account. Any repositories attached to your workspace from that account will no longer be able to perform scans.

Troubleshooting

Installation Pending Approval

If you see “Installation pending approval”, it means you requested to install the app on an organization where you’re not an admin. An organization owner will need to approve the installation.

Repositories Not Appearing

If your repositories don’t appear in the Add repository picker:

  1. Verify the GitHub App is installed on the correct organization
  2. Check that the app has access to the specific repository
  3. Ensure you have at least read access to the repository on GitHub

Permission Errors

If you see permission errors when scanning:

  1. Verify the GitHub App has the required permissions listed above
  2. Ensure the app is installed on the repository you’re trying to scan
  3. Check that the installation hasn’t been suspended

Need Help?

If you encounter issues setting up your GitHub integration, please contact our support team at team@pensar.dev.