GitHub

Install the GitHub App and select repositories

Install the Veridical GitHub App for the organization or user that owns the repositories. Grant only the repositories to review. Veridical requires pull request metadata, commit contents, checks, and review-comment access; write access is used only for explicitly enabled comments, checks, or fix branches.

Webhook deliveries are signature-verified and replay-protected before work is queued. Installation tokens are short-lived and repository-scoped.

After installation, connect the installation from the Veridical workspace and open a pull request. Use the cockpit’s integration status if the repository is missing or a delivery was rejected.