Connect GitHub

What it pulls

Org/user, repositories, branches & protection, commits, pull requests (open age, merged, review & cycle time), issues, releases, Actions workflows/runs (failures, duration), deployments where available, contributors, stale repos, repo file-tree signals for containers/IaC/platform artifacts, runtime version files, Dependabot/code-scanning/secret-scanning alerts. When the org grants Copilot Metrics (org-admin), org-level Copilot usage for the trailing 28-day window (active/engaged users, suggestions/acceptances) and Copilot seat assignments. Copilot billing seats and plan when the token can read them (best-effort; 403/404 skipped).

1. 1

   Preferred — install the ShipReady GitHub App

   Use the “Install the ShipReady GitHub App →” link above (github.com/apps/shipreadymetrics), or choose Connect with GitHub App in the app. The install is org-owned and limited to the repositories you pick — there is no token to copy.

2. 2

   Connect in the app

   After installing, return to Connections and complete the link so the first sync can run.

3. 3

   Fallback — create a fine-grained token

   If you cannot install the App, create a fine-grained token at github.com/settings/personal-access-tokens/new (Settings → Developer settings → Personal access tokens → Fine-grained tokens; Developer settings is the LAST item at the bottom of GitHub's Settings sidebar). Grant Read-only on Contents, Metadata, Pull requests, and Actions, plus Organization → read:org. For Copilot adoption (optional, org-admin): Organization Copilot Metrics (read) and GitHub Copilot Business (read). If you use a classic token instead (repo, read:org, read:user, manage_billing:copilot for Copilot), be aware the classic repo scope has no read-only tier — it grants write capability even though ShipReady only ever issues read requests, so prefer fine-grained and set a short expiration. Never grant admin.

4. 4

   Fallback — set repository access + expiration

   Fine-grained tokens: pick which repositories ShipReady can read (or all). Set an expiration (e.g. 90 days).

5. 5

   Fallback — generate and copy the token

   Click Generate token and copy it now — GitHub shows it once (ghp_… classic, github_pat_… fine-grained).

6. 6

   Paste the token and connect

   Token fallback only: drop the token into the field and click Connect GitHub. We validate it live (confirming repo + read:org access), encrypt it at rest, and run the first sync.