GitHub Integration

ByteHide Radar integrates directly with GitHub to scan your repositories, create AutoFix pull requests, and trigger automatic scans on code changes.

Click to expand

How the Integration Works

Radar connects through the ByteHide GitHub App:

• Read access to repository contents for source code analysis during scans
• Write access exclusively for creating AutoFix branches and pull requests
• Webhook events trigger automatic scans on push and pull request events
• No code storage: analysis is performed in memory; only findings are persisted, not your source code

The integration uses the GitHub App model with granular permission control and does not require personal access tokens.

Connecting a Repository

1. Create or open a Radar project from the ByteHide Cloud dashboard
2. In the repository connection section, view available repositories from your GitHub account or organization
3. If your repositories are not listed, click "Manage Connected Repositories" to install the ByteHide GitHub App
4. Select your repository from the dropdown
5. Click "Link Repository" to connect it

Managing Repository Access

The ByteHide GitHub App can be configured for selected repositories or all repositories in your organization.

To add or remove repository access:

1. Go to GitHub Settings > Applications > ByteHide
2. Click Configure
3. Under "Repository access", add or remove repositories
4. Save changes

Organization administrators control which repositories the app can access through organization settings.

Automatic Scanning

Scans typically complete in 1 to 5 minutes depending on codebase size.

Changing the Connected Repository

1. Open Project Settings
2. Click "Change" next to the current repository name
3. Select a new repository and confirm

Previous scan history remains in the project. The new repository is scanned on the next trigger.

Unlinking a Repository

1. Open Project Settings
2. Click "Unlink" next to the connected repository
3. Confirm the action

Scan history and findings are preserved. Automatic scanning stops and AutoFix is disabled until a new repository is connected.

AutoFix Branches

When AutoFix is used, Radar creates branches (autofix/* or fix/*) and pull requests in your repository using the GitHub App's write permissions. PRs target your default branch. After merging, safely delete the branch using GitHub's standard cleanup options.

Next Steps