GitHub as a governed connection — not a token in the prompt.
GitHub connections use a PAT or GitHub App stored as credentials. Coding and ops workflows call the GitHub API through that connection, scoped to the tenant.
How GitHub is wired
Catalog-gated `github` connector. Used from admin GitHub connections and workflow tools — not as a substitute for Ansible workspaces.
GitHub connections
Register the connection in admin. Default API base is api.github.com; credentials stay in the secret wallet.
PAT or GitHub App
Personal access tokens and GitHub Apps are supported credential shapes. They are not copied into agent instructions.
Workflow tools
Connector tool steps select the GitHub connection and operation. Tenant, role and entitlement still gate the call.
Ready to move beyond the chatbot?
Build AI that understands your business, follows your processes, finishes the work — and keeps token spend under your control.