Conectado directamente
GitHub: ¿Quién puede hacer qué en el código? Complass lo sabe.
Miembros, equipos y permisos para las revisiones de acceso, además de ajustes como la obligatoriedad de 2FA como evidencia.
Cómo funciona
- Create a GitHub app
You create your own GitHub app with read permissions only and install it on your organisation.
- Check the preview
The first run is a preview. Nothing is stored until you adopt it.
- Sync regularly
After that Complass syncs daily, or every six hours or weekly if you prefer.
- Review access
Members and rights appear in access reviews. You match people once by hand, because Complass reads no e-mail addresses.
Which data is exchanged
| Direction | Data | Aviso |
|---|---|---|
| GitHub → Complass | Members with role and 2FA status, outside collaborators, teams with members and repositories | Owners count as privileged. |
| GitHub → Complass (optional) | Direct repository rights from write access upwards | At most 2,000 repositories per run. |
| GitHub → Complass (evidence) | Only switches and figures, such as required 2FA, number of owners, branch protection, secret scanning, push protection and Dependabot | No alert contents and no secrets. |
| Complass → GitHub | Nothing | Complass refuses apps with write or admin permissions. |
| Not read | Code, issues, pull requests, secrets, e-mail addresses, real names, avatars and the audit log | Complass does not request this data at all. |
Setup
- Your own GitHub app, installed on exactly one organisation on GitHub.com.
- Read permissions on members, organisation administration and repository metadata. Repository administration only for direct rights and settings such as branch protection.
- In Complass you enter the organisation, app ID, installation ID and the app's private key.
- Administrators with the right for API, webhooks and integrations can set it up.
Seguridad y protección de datos
- Read only: Complass checks the app's permissions on every test and refuses write and admin permissions.
- The private key is stored encrypted in Complass. Each run creates a token valid for at most one hour, in memory only.
- Complass only connects to the GitHub API.
- Only active repositories count for evidence. With the topic "complass-ignore" you leave a repository out.
Preguntas frecuentes
Does it work with GitHub Enterprise Server?
No, only with organisations on GitHub.com.
We have several organisations. What now?
One connection covers exactly one organisation.
Can Complass read our code?
No. The app needs no permission on contents, and Complass requests neither code nor issues or pull requests.
More connections
Which packages include the connection to GitHub, see the package overview. See the packages
- Microsoft Teams
- Slack
- Jira
- ServiceNow
- Microsoft Entra ID
- Microsoft 365
- Todas las conexiones e importaciones
Los nombres de productos y las marcas mencionados pertenecen a sus respectivos titulares. No existe ninguna asociación, certificación ni recomendación por parte de los titulares. GitHub es una marca de GitHub, Inc.
Pruebe Complass con sus propios datos
Cree usted mismo su acceso de prueba, con un proyecto de ejemplo por marco normativo si lo desea. Si prefiere que primero le mostremos Complass, solicite una demo.