GitHub

Connect Sola and GitHub to get security insights

Overview

The GitHub connector brings Sola AI into your GitHub organization, allowing it to create and comment on issues, and read repository, team, and security alert data directly from conversations.

The GitHub connector helps close the loop on findings surfaced elsewhere in Sola by turning them into tracked work in the repositories where your teams already operate.

With the GitHub integration, you can:

• Search, create, update, and comment on GitHub issues directly from Sola AI conversations.

• List and create pull requests, including committing files to a new branch or pushing additional commits to an existing one, directly from Sola AI conversations.

• Track code scanning, Dependabot, secret scanning, and security advisory findings across your repositories.

• Monitor organization members, teams, team membership, and repository collaborator access.

• Review repository metadata, file contents, the file tree, branches, commits, tags, and code search for context during an investigation.

Sola can only perform the actions you approve.

Connectors require explicit permission to access or act on external systems. Permissions are securely managed at the workspace, project, and chat level to ensure control at every step.

Set up GitHub connector integration with Sola

Go to Integrations > Connectors > click New connector > select GitHub.

The Sola wizard will take you through the steps.

Set up GitHub ->

Connect GitHub to Sola

To connect GitHub, you'll need a GitHub account with organization owner permissions or admin access to the repositories you want to connect.

Github App

Recommended for secure, production use.

This method leverages a GitHub App to grant Sola temporary, permissioned access to your GitHub resources, at either the repository or organization level, based on your choice. It minimizes risks associated with personal tokens and long-term credentials by enforcing strict, scoped access.

Install Sola’s GitHub App to securely and easily grant access to your organization’s GitHub data.

Available actions with the GitHub connector

• Manage Issues - List, search, create, update, and comment on GitHub issues.

• Manage Pull Requests - List and fetch pull requests, create new pull requests with file commits to a new branch, and push additional commits to an existing pull request.

• Read Security Alerts - Retrieve code scanning, Dependabot, secret scanning, and security advisory findings for a repository.

• Read Repository Data - Access repository metadata, file contents, the file tree, branches, commits, tags, and code or commit search.

• Read Organization Data - Retrieve organization members, teams, team membership, and repository collaborators.