Skip to main content

GitHub App Authentication for the GitHub Agent

Date: 2026-02-10 Author: Sri Aradhyula (sraradhy@cisco.com) Status: Implemented Branch: prebuild/github-app-token-auto-refresh


Overview​

The GitHub agent now supports GitHub App authentication as an alternative to Personal Access Tokens (PATs). GitHub App tokens are short-lived (60 minutes) and auto-refresh, eliminating the need for monthly PAT rotation.

Prerequisites​

  • GitHub organization admin access (to create and install apps)
  • Access to a secrets manager for storing the private key (production)