GitHub App Authentication for the GitHub Agent
Date: 2026-02-10
Author: Sri Aradhyula (sraradhy@cisco.com)
Status: Implemented
Branch: prebuild/github-app-token-auto-refresh
Overview​
The GitHub agent now supports GitHub App authentication as an alternative to Personal Access Tokens (PATs). GitHub App tokens are short-lived (60 minutes) and auto-refresh, eliminating the need for monthly PAT rotation.
Prerequisites​
- GitHub organization admin access (to create and install apps)
- Access to a secrets manager for storing the private key (production)