Skip to content
agent-ops
Menu

GitHub

GitHub App

An org-wide App mints a short-lived installation token scoped to one target repo per run.

Each dispatch signs a JWT with the App’s private key and exchanges it for an installation token limited to the target repo. No personal access token is involved.

The App is org-owned because Projects v2 permissions for Apps exist only on org-owned projects. Its own webhook is off; the Lambda relay uses a separate org webhook.