Skip to content
Security

Connecting GitHub

Install the Relane GitHub App, import granted repositories, and keep repository access current.

Install the Relane GitHub AppPermalink to Install the Relane GitHub App

Relane Security connects to GitHub through a GitHub App installation. You choose which account or organization receives the installation and which repositories it can access. Start from the Relane workspace that should own the scans.

  1. Open the GitHub connection panel

    Go to Repositories and choose Connect repository if the panel is closed. Choose Connect GitHub, or Add GitHub account if an installation is already linked.

  2. Choose the GitHub account

    In the browser, sign in to GitHub and select the account or organization that owns the repositories.

  3. Review and grant repository access

    Select the repositories you intend to scan. You can grant all repositories if that matches your organization's policy, but it is not required for routine scanning. Review the installation permissions before approving.

  4. Return to Relane

    Complete the installation and return to Repositories. Check the setup message and the selected Relane workspace, then choose the linked GitHub account.

If GitHub requires an organization owner to approve installation, ask that owner to complete the approval. This does not mean every scan user needs repository administrator access.

Import granted repositoriesPermalink to Import granted repositories

Select the GitHub account in the installation picker and review Granted repositories. Choose Bind beside each repository you want to add to this Relane workspace. Bound confirms it has been imported. An installation grant makes a repository available to choose; it does not automatically import or scan every granted repository.

GitHub's See repositories view lets you inspect a connection, but GitHub imports use Bind in the installation picker rather than the Add action used for GitLab and Bitbucket. After binding, find the repository in Repositories or Start a scan.

Update repository accessPermalink to Update repository access

  1. Update the grant on GitHub

    If a repository is missing from a selected-repositories installation, use Manage access. For an empty grant, use Grant access on GitHub. Add only the repositories you need.

  2. Sync the installation

    Return to the same workspace and GitHub account, then choose Sync beside Granted repositories. Review the accessible repository count and any error shown.

  3. Import or restore the repository

    Use Bind for newly granted repositories you want to import. If an existing repository still shows Disconnected or Access suspended, restore its GitHub access and choose Reconnect on its repository card. Check the resulting state before scanning.

Sync updates access for repositories already in the workspace as well as the list available to import. If a grant was withdrawn, the affected repository stops being scannable. Sync does not start scans.

Restore a suspended installationPermalink to Restore a suspended installation

A suspended GitHub App installation cannot read its repositories. The installation picker identifies it as suspended, disables Bind, and affected imported repositories show Access suspended. Ask someone with permission to manage the installation to restore it on GitHub, then return to Relane and Sync or Reconnect as needed.

Reconnect checks access; it cannot override GitHub's suspension or grant a missing repository permission. Confirm that the repository is Active before starting another scan. Previously completed scans remain available in History.

Resolve GitHub connection problemsPermalink to Resolve GitHub connection problems

  • Connection canceled or failed: read the setup message, return to the intended workspace, and start Connect GitHub again rather than reusing the return link.
  • No repositories granted: verify the selected GitHub account, grant access to the intended repositories on GitHub, then Sync.
  • Installation linked to another workspace: check whether that is the workspace you meant to use. If ownership needs to change, contact your workspace owner or Relane support instead of repeatedly reinstalling.
  • Sync or Reconnect does not restore access: check for suspension, an unapproved installation, or a repository omitted from the grant. Correct that on GitHub first, then retry in Relane.

Keep scanning and fix approval separatePermalink to Keep scanning and fix approval separate

CloudFix may offer Prepare fix for an eligible confirmed dependency finding in a connected GitHub repository. It is a separate review and approval workflow, not part of connecting or starting a scan. A proposal must pass its safety checks before you can approve it, and Relane does not merge the pull request for you. GitHub CloudFix eligibility does not extend to GitLab or Bitbucket merely because they are connected for scanning.