GitHub Advanced Security

Required Permissions

The user authorizing the Github connection needs specific organization-level permissions.

For Organization Installation

Only Organization Owners can install GitHub Apps. The Organization Owner role:

Has complete administrative access to the organization
Can install and authorize GitHub Apps for the entire organization
Can select “All repositories” or specific repositories during installation
Can purchase, install, manage billing for, and cancel GitHub Marketplace apps

Note: The GitHub App Manager role allows users to create, edit, and delete GitHub App registrations, but it does not grant the ability to install or uninstall GitHub Apps in the organization.

For Personal Account Installation

The user just needs to be the account owner of their personal GitHub account.

For GitHub Advanced Security Access

Since this integration pulls from GitHub Advanced Security (Code Scanning, Secrets Scanning, Dependabot), ensure:

GitHub Advanced Security is enabled on the repositories or organization
The installing user has read access to security alerts (usually automatic for Owners)

Key Points

GitHub Apps require installation - not just OAuth authorization
The user selects which repositories to grant access to
Can grant access to all repositories or specific repositories
The app needs permissions to read Code Scanning, Secret Scanning, and Dependabot alerts

Recommendation: Use an Organization Owner account for the installation to ensure the Leen GitHub App can be installed with access to all necessary repositories and security alerts.

Supported Data Models

Vulnerability Findings
- type: code
Resources
- type: repository

Create a Connection for GitHub Advanced Security

Create a GitHub connection

With Leen API Key and Customer’s Org ID, make an API request to create a new GitHub Connection.

More information can be found on the API Reference page.

Example POST body and response

  {
    "vendor": "GITHUB"
  }

The response will look like this:

  {
      "id": "c54de187-df62-4e95-b10f-0ab53b095d9d",
      "vendor": "GITHUB",
      "refresh_interval_secs": 14400,
      "timeout_secs": 1800,
      "organization_id": "fbd8b095-3c39-4137-9478-c32308444202",
      "oauth2_authorize_url": "https://github.com/apps/.../installations/new?....."
  }

Onboarding GitHub Advanced Security

Follow the steps below to onboard your environment to our GitHub Advanced Security integration.

Granting permission to Leen app for GitHub

Open the oauth2_authorize_url from the connection creation step.
Select the account/organization for which the github app needs to be installed for access to GitHub Advanced Security Alerts.
Select the repositories that need to be authorized for the access. (Selection possible for all repositories or specific ones as well.)
Click Install and Authorize button to complete the GitHub app installation.
The page will be redirected to Leen on a successful authorization.

Orca Security AppSec V1 to V2

Get Started

Integrations

OnRamp

Webhooks

Required Permissions

For Organization Installation

For Personal Account Installation

For GitHub Advanced Security Access

Key Points

Supported Data Models

Create a Connection for GitHub Advanced Security

Onboarding GitHub Advanced Security

​Required Permissions

​For Organization Installation

​For Personal Account Installation

​For GitHub Advanced Security Access

​Key Points

​Supported Data Models

​Create a Connection for GitHub Advanced Security

​Onboarding GitHub Advanced Security

Required Permissions

For Organization Installation

For Personal Account Installation

For GitHub Advanced Security Access

Key Points

Supported Data Models

Create a Connection for GitHub Advanced Security

Onboarding GitHub Advanced Security