Onboard an existing Customer-Owned GitHub App

If your organization already created a Customer Owned GitHub App through a previous onboarding, create a new integration that reuses that existing GitHub App instead of creating another GitHub App. Reusing an existing GitHub App avoids creating duplicate GitHub Apps in your organization and preserves the tenant isolation model: a single organization-owned GitHub App backs every integration for that GitHub organization.

Prerequisites

• Fulfill the Shared prerequisites
• Confirm that at least one Customer Owned GitHub App was previously created for this Cortex tenant through the New Customer Owned GitHub App flow. Each Customer Owned GitHub App belongs to the GitHub organization in which it was created

Permissions

An existing Customer Owned GitHub App holds the permissions defined when the app was created. These permissions match the Customer Owned GitHub App permission set. Refer to Reference B: Customer Owned GitHub App permissions for more information. If the permissions were downgraded after creation, restore them before reuse to avoid disabling Cortex Cloud capabilities. Refer to Update Customer Owned GitHub App permissions or resolve integration errors.

Onboarding steps

1. In your Cortex tenant.

   1. Select Settings > Data Sources & Integrations, select + Add New.
   2. Search for GitHub (SaaS), hover over the card and click Add, or Add Another Instance if an instance is already onboarded.
   3. On the Configure account step, select Existing Customer Owned GitHub Apps.
   4. From the app dropdown menu, select the Customer Owned GitHub App you want to reuse. The dropdown lists the Customer Owned GitHub Apps previously created for this Cortex tenant, identified by app name. Select the app that belongs to the GitHub organization you are onboarding.
   5. Select Authorize. Cortex Cloud redirects you to GitHub to install the selected GitHub App.
2. On GitHub.

   1. On the GitHub installation page, select the GitHub organization to install the existing app on, set the GitHub access scope (All repositories or Only select repositories)
   2. Select Install. GitHub redirects back to your Cortex tenant.
3. In the onboarding wizard:

   1. Select the repositories Cortex Cloud scans:

      • All current repositories
      • All current and future repositories
      • Specific repositories Manual selection supports up to 20 repositories. If you choose manual selection, select at least one repository.
   2. Select Save to create the integration. Result: The Customer Owned GitHub App exists in your GitHub organization, and the corresponding integration appears in the Cortex Cloud integrations list with the Customer Owned ownership indicator. Cortex Cloud begins scanning the selected repositories according to your Application Security configuration.

Verify and manage integrations

After onboarding, verify the connection and manage your GitHub (SaaS) integration from the integrations list.