Who Can Install
A GitHub organization owner. Organization members can also start the installation — GitHub will send an approval request to the organization’s owners, and the connection completes once an owner approves it.Getting Started
- Click Connect, and you will be redirected to github.com to install the Human Intelligence app.
- Select the organization you want to connect, then choose All repositories or Only select repositories. Human Intelligence can only ever see the repositories you select here, and you can change the selection in GitHub at any time.
- Review the requested access (see Permissions below) and click Install. GitHub will redirect you back to Human Intelligence, and the GitHub tile will switch to Connected within a few seconds.
Permissions
Every permission the app requests is read-only:The app does not request access to repository contents, so Human Intelligence structurally cannot read your source code — this is enforced by GitHub, not by policy on our side. The app also cannot push code, modify pull requests or issues, change settings, or write anything to your repositories.
Tokens
- GitHub App installations do not use long-lived credentials: access tokens are minted on demand, expire after one hour, and are scoped to exactly the repositories and permissions you granted.
- Connection details are stored encrypted at rest in Google Cloud Secret Manager, scoped per customer, behind least-privilege IAM. Human Intelligence developers and support cannot read their values.
- All communication with GitHub runs over TLS, and every secret access is recorded in Cloud Audit Logs.
Revoking Access
You can disconnect at any time:- From Human Intelligence: Integrations → GitHub → Disconnect. We delete our copy of the connection immediately.
- From GitHub: uninstall the Human Intelligence app under your organization’s Settings → Third-party Access → GitHub Apps, or narrow its repository access on the same page. Uninstalling immediately invalidates all tokens and cuts off Human Intelligence’s access.