GitHub App permissions

Required GitHub App permissions and setup URLs for Team repository scanning.

Required permissions

  • Metadata: Read
  • Contents: Read
  • Checks: Read and write
  • Pull requests: Read

Setup URLs

Use your public application URL:

  • Setup URL / callback: {APP_URL}/api/github/install/callback
  • Webhook URL: {APP_URL}/api/github/webhook

Redirect on update

Enable Redirect on update in the GitHub App settings. This ensures repository access changes during installation updates return users to Foo Guard correctly.

Related pages