Security
GitHub Access
Understand GitHub App permissions, read-only token scopes, OAuth rotation, and IP allowlisting.
Overview
When you connect a GitHub repository for knowledge synchronization, Asiyst requests the minimum necessary permissions via the official Asiyst GitHub App.
GitHub App Permission Matrix
| Resource | Requested Permission | Justification |
|---|---|---|
| Repository Contents | Read-only | Download Markdown, code schemas, and README files |
| Webhooks | Read & Write | Register push events for automated knowledge updates |
| Issues / Pull Requests | None (No access) | Asiyst never inspects pull request discussions |
Token Rotation & Expiration
GitHub App installation tokens are ephemeral and rotate every 60 minutes automatically.