GitHub App

Install Pinelight's GitHub App to automatically scan your pull requests.

Installation

  1. Go to your organization or user settings in GitHub
  2. Navigate to Settings > Installed GitHub Apps
  3. Click Install Pinelight
  4. Select the repositories you want to protect
  5. Configure auto-scanning for new repositories

Permissions

Pinelight requests the following permissions:

  • Contents read: Access to read repository code for scanning
  • Pull requests read & write: Post check runs and review comments
  • Statuses read & write: Update commit status checks

How It Works

  1. When a PR is opened or updated, Pinelight receives a webhook notification
  2. Pinelight fetches the changed files from the PR
  3. The scanner analyzes each file for vulnerabilities
  4. A check run is posted to the PR with a summary
  5. Inline comments are posted for each finding

Auto-Scanning

Enable auto-scanning for new repositories:

  1. Go to your Dashboard
  2. Navigate to Repositories
  3. Toggle Auto-scan for each repository
  4. New PRs will be scanned automatically