GitHub Integration

Authentication Mechanism: Personal Access Token (PAT)

Phase 1: User Request (Token Generation)

  1. Access Developer Settings:

    • Log in to GitHub and navigate to Settings (via your profile icon).

    • In the left-hand sidebar, scroll to the bottom and select Developer settings.

    • Select Personal access tokens →  Fine-grained tokens.

  2. Configure Token Identity:

    • Click Generate new token.

    • Token name: Use a clear naming convention, such as [Capacity-AnswerEngine-Token].

    • Expiration: Select an appropriate lifecycle (30, 60, or 90 days is standard for security compliance).

  3. Define Resource Ownership:

    • Under Resource owner, select the target Organization from the dropdown menu.

      image-20260130-112418.png
  4. Define Repository Scope:

    • Select Only select repositories.

    • Choose the specific repositories required for ingestion. 

  5. Configure Permissions:

    • Expand the Repository permissions section.

    • Select Contents to Read-only

    • Metadata access is automatically set to Read-only and is required for all tokens.

      image-20260130-112441.png
  6. Submit Request:

    • Click Generate token. You will receive a notification that the token is "Pending" until an Organization admin approves it.

      image-20260130-112521.png

Phase 2: Administrative Review & Approval

Because the token is owned by the Organization, an administrator must authorize its creation to ensure it meets security standards.

  1. Navigate to Organization Settings:

    • Switch to the Organization view in GitHub.

    • Click on the Settings tab in the top navigation bar.

  2. Review Pending Requests:

    • On the left sidebar, locate the Personal access tokens section and click Pending requests.

  3. Audit and Authorize:

    • Review the requested permissions and repository access for the token.

    • Click Approve to activate the token. The requesting user will be notified once the token is live and ready for use.


Was this article helpful?