GitHub integration and security

To integrate Perforce Unified Compliance with GitHub, you install the Perforce Unified Compliance GitHub App in the GitHub organization that contains the repositories you plan to optimize. The app authorizes Perforce Unified Compliance to securely access only the repositories you select.

How the integration protects your data

The solution is designed to help protect data and prevent unauthorized access in the following ways:

• No software is installed in your environment. The GitHub App is a registered interface that authorizes Perforce Unified Compliance to access specific repositories or organizations via an API.

• Perforce Unified Compliance uses secure authentication and a tenant-aware service so your data remains isolated. It accesses only the repositories that you specify during setup.

For general information about GitHub Apps, see the GitHub documentation.

Security and permissions

Perforce Unified Compliance uses signed JSON Web Tokens (JWTs) to associate each GitHub App installation with the correct Perforce Unified Compliance tenant. It does not store GitHub credentials.

Permissions are limited to the specific repositories you select during installation. To access these repositories, Perforce Unified Compliance requires the following permissions:

• Read access to code and metadata

• Read and write access to issues and pull requests

All changes are delivered as pull requests.

You can manage or uninstall the GitHub App at any time from your GitHub organization settings.

Next steps

• Set up GitHub integration