This is the recommended authentication method for organizations with 500+ repositories.
Install a GitHub App
Follow the steps below to create and configure your own GitHub App.Configure the app
Configure the app with the following settings:
- GitHub App name: Choose a unique name (e.g.,
YourOrg-GitHound) - Homepage URL: Your organization’s URL
- Webhook: Uncheck “Active” (not needed for collection)
Create the app
Click Create GitHub App to create the app with the specified settings and permissions.
Generate a private key
Scroll down and click Generate a private key - save the downloaded
.pem file securely. Note the App ID and Client ID displayed on the app settings page.Get the Installation Details
- Navigate to your Organization Settings > Third-party Access > GitHub Apps.
- Find the app you just created and click Configure.
- The numeric value in the URL is the App Installation ID.
- Click App settings to access the Client ID and App ID.
Security Considerations
- Store the
.pemprivate key securely and never commit it to version control. - Rotate keys periodically and revoke old ones.
- Only install the app on organizations that require collection.
- Periodically verify the app has only the minimum required permissions.