Github Integration
GitHub is a web-based platform utilizing Git for version control. It enables collaborative software development by allowing users to host and manage code repositories. Developers can track changes, propose modifications through pull requests, and manage project issues. GitHub's interface facilitates code collaboration, branching, and community engagement, making it a central hub for version control and collaborative coding.
How does this integration helps Sprinto
This integration ensures that crucial security configurations—such as branch protection and peer reviewer settings—are established for integrated code repositories and ticketing systems on Sprinto. Sprinto utilizes granted permissions to retrieve details like user accounts and security configurations, mapping them to necessary Sprinto checks.
Sprinto checks for GitHub
The below procedure below has a dedicated section for configuring GitHub as a change management and ticketing system. You can follow the section that applies to your GitHub Usage:
Sprinto check
Check description
Reference procedure
GitHub org level MFA should be enforced
Multi-factor authentication (MFA) should be enforced at the organization level.
GitHub user should have MFA enabled
Multi-factor authentication (MFA) should be enabled on all users' accounts
Github access should be removed for offboarded user
Revoke access from the organization’s GitHub account for every offboarded staff member.
Dependabot vulnerability scan should be enabled
Enable the Dependabot vulnerability scan on your GitHub repositories.
Peer review should be enforced for code changes
Peer review should be enforced on every change merging request on the main branch.
Merging of code changes should require passing status-checks
Every code change must pass the status check.
Branch Protection rules should be enforced for admins
The branch protection ruleset should be configured on the GitHub account.
Code changes should be reviewed by peers before merging
Every code change should be reviewed by a peer reviewer.
Before you begin
Log in on Sprinto as administrator.
Ensure you have “Admin” access on the GitHub account to integrate with Sprinto.
Ensure you have an Organisation account on GitHub
Integrate Sprinto with GitHub
The below procedure has a dedicated section for configuring Github as a change management and ticketing system. You can follow the section that applies to your GitHub Usage:
Github (Change management)
Following are the steps to integrate GitHub as a change management system on Sprinto.
Integrating GitHub with Sprinto.
Go to Security Hub > Settings > Integrations > Available, then click Connect next to the GitHub app.
On Integration page, click Next.
Click Connect. This opens the GitHub login page.
Note: Ensure pop-up windows are enabled.
Log in to GitHub with your credentials.
Click Allow to grant necessary permissions to Sprinto. Click Save to save the changes.
Configuring GitHub account on Sprinto.
On Sprinto app, go to Security Hub > Change Mgmt, and click Add system.
On Add a Change Management System page, click Add next to the GitHub app under the Code repos section.
Note: If you have performed Step 1 correctly, you will see Connected highlighted next to the GitHub option.
Follow the on-screen instructions to configure your GitHub account on Sprinto.
GitHub Issues (Ticketing System)
Following are the steps to integrate GitHub as a ticketing system on Sprinto.
Integrate GitHub issues with Sprinto.
Go to Security Hub > Settings > Integrations > Available, then click Connect next to GitHub Issues.
Select the acknowledgment checkbox, then click Connect to GitHub Issues.
Note: Ensure pop-up windows are enabled.
From the Integration window, click Next.
Enter your GitHub User ID and Password, then click Submit.
Configuring GitHub account on Sprinto.
On Sprinto app, go to Security Hub > Change Mgmt, and click Add system.
On Add a Change Management System page, click Add next to GitHub issues under the Ticketing system.
Note: If you have performed Step 1 correctly, you will see Connected highlighted next to the GitHub.
Follow the on-screen instructions to configure your GitHub account on Sprinto.
Final Step
GitHub is now integrated with your Sprinto account. Sprinto will take 15 to 20 minutes to sync data (Depending on the size of your repositories/issues). Once data is synced, Sprinto will activate relevant checks for any configuration that does not align with compliance requirements.
Contact Sprinto support if you have any queries regarding the integration or need any assistance.
Last updated