App for GitHub

This page covers connecting ResolveAI to your code on GitHub, in all three ways customers commonly run it:

• github.com via the Resolve-managed app, fastest path. One-click install, no app credentials to manage. See Connect via the Resolve-managed app.
• Bring-your-own GitHub App, for GitHub Enterprise Server (on-prem), GitHub Enterprise Cloud, or github.com when you want to operate the app yourself. See Bring Your Own GitHub App.
• Token auth, fine-grained or classic PAT for any GitHub variant; useful for mixed-provider setups. See Git Integration for token-auth setup.

​

How it works

ResolveAI integrates with GitHub through a GitHub App. Once installed:

• GitHub automatically issues a short-lived installation token per request. You never manage or rotate personal access tokens. ResolveAI handles token lifecycle and refresh behind the scenes.
• The agent pulls in relevant code, commits, and pull requests as part of an investigation to help you quickly zero in on the root cause.
• You can ask questions that span your telemetry and your codebase, and ResolveAI connects the dots for you.
• When you ask for a fix, Resolve proposes code changes and opens a pull request for your review. It never pushes commits or merges on its own, remediation is always a user-invoked, review-first flow. This is why the app needs write access on code and pull requests (see Step 3).

---

​

Connect via the Resolve-managed app

Use this on github.com when you can install the Resolve-managed GitHub App. It’s the fastest path, no app credentials, no private key, no base URL.

1. Log in to the ResolveAI App at app0.resolve.ai
2. Open the GitHub Integration page
3. Create a new integration, add a Name and click Install Application
4. In GitHub, pick all or a subset of your repositories in the dropdown and click Save

The Resolve-managed app requests the same permission set documented under Step 3: Set repository permissions below.

---

​

Bring Your Own GitHub App

Create a GitHub App you own, install it on your organization, and connect it to Resolve via the Git integration’s ghe auth type. The same procedure works for all GitHub variants:

• github.com, when you’d rather operate the app yourself instead of installing the Resolve-managed one (compliance, audit, scoped permissions)
• GitHub Enterprise Cloud
• GitHub Enterprise Server (on-prem), including air-gapped instances reachable only from inside your network (use a Satellite)

​

Step 1: Navigate to Developer Settings for the org account

1. Log in to your GitHub instance (github.com or your GHE Server URL).
2. Navigate to your organization’s main page.
3. In the left sidebar, click Settings.
4. Click Developer settings > GitHub Apps.

​

Step 2: Click on New GitHub App

Click New GitHub App and fill in the basic details:

• GitHub App name: e.g. ResolveAI (must be unique on the instance)
• Homepage URL: https://resolve.ai/
• Webhook: uncheck Active, Resolve does not consume GitHub webhooks

​

Step 3: Set repository permissions

Grant the GitHub App the following repository permissions:

Read access to: actions, checks, commit statuses, deployments, discussions, issues, merge queues, and metadata Read and write access to: code (Contents) and pull requests

The read scopes let Resolve pull code and investigation context. The read-and-write scopes let it propose code changes and open pull requests for your review. Per-permission detail:

​

Step 4: Collect credentials and generate a private key

After saving, capture from the app settings page:

1. App ID, shown on the General tab
2. Private key, scroll down to Private keys and click Generate a private key; a .pem file downloads. Store it somewhere safe, GitHub will not show it again.

​

Step 5: Install the GitHub App

From the app settings page:

1. Click Edit on the app you just created (or Install App in the left sidebar).
2. Click Install next to your organization.
3. Choose All repositories or Only select repositories and pick the repos you want Resolve to access.

​

Step 6: Collect the Installation ID and base URL

​

Installation ID

Path: Profile picture > Settings > Applications > Configure (on the app you just created). The installation ID is the trailing number in the URL. Example: https://github.com/organizations/<your-org>/settings/installations/84995228, installation ID is 84995228.

​

API base URL

For older GHE Server versions or custom-overridden base URLs, contact your GitHub administrator.

​

Step 7: Configure the Resolve integration

Connect the BYO app to Resolve through the Git integration’s ghe auth type. Pick SaaS if your GitHub instance is reachable from the public internet, or Satellite if it lives inside your network.

GitHub App permissions reference

Capabilities only become available when the matching permission is granted on the app installation.

Resolve capability	Permissions required
Repository read (clone, file reads, history, diffs)	Contents (Read), Metadata (Read)
Reading PR data (metadata, diffs, comments, file contents)	Pull requests (Read), Contents (Read), Metadata (Read)
Proposing code changes and opening pull requests	Contents (Read & write), Pull requests (Read & write), Metadata (Read)
Reading GitHub Actions workflow runs and workflow definitions	Actions (Read)
Reading PR check status	Checks (Read), Pull requests (Read)
Commit statuses, deployments, discussions, issues, merge queue context	The matching read permission for each

If a feature returns 403/permission denied at runtime, the app installation is usually missing one of these. Update the app’s permissions on GitHub, accept the prompt to apply the new permission set on the existing installation, then retry.

---

​

Frequently Asked Questions

How does ResolveAI's GitHub integration work?

The integration is installed as a GitHub App.

• You install the app on any repository you want ResolveAI to read.
• GitHub issues a short-lived installation access token automatically for each request, so you never manage or rotate PATs yourself.
• All token lifecycle and refresh logic is handled by ResolveAI behind the scenes.

What data does it look at?

The GitHub App requests the permissions documented in Step 3. With those scopes, during an investigation the agent reads:

• Repository tree (file paths and file contents)
• Pull / Merge Requests (open and merged), including diffs and review comments
• Commit metadata and diffs
• Basic repository metadata (default branch, topics, permissions)
• GitHub Actions workflow definitions and recent runs (statuses, conclusions, head SHAs)
• Check runs and CI status for PRs
• Issues and Discussions referenced as context

You can review the precise permission set during installation or on the GitHub App page at any time.

Does ResolveAI store the source code?

No. Source code is streamed from GitHub at runtime only and is not persisted or mirrored on ResolveAI’s servers. The sole exception is small code snippets that appear in your investigations, which are saved in ResolveAI SaaS or sent to Slack.

Can ResolveAI make changes to my repositories?

The GitHub App has write permissions on Contents (code) and Pull requests, but those are only used for explicit, user-invoked actions. Resolve never auto-pushes commits or opens PRs in the background. The app cannot merge code or alter repository settings.If you want to disable writes entirely on a Git integration, set disableWrites: true on the integration’s connection. Read-only operations stay available, write/remediation paths are blocked.For BYO setups, you control the granted permissions on your own GitHub App.

I'm using a GitHub IP allowlist. How do I connect with Resolve?

GitHub IP allowlistContact us at help@resolve.ai to manage the allowlist of IP addresses for ResolveAI to connect to your GitHub organization.