Skip to content

[Feature][gh-copilot] Support GitHub App authentication (in addition to PAT) #8843

@fool65c

Description

@fool65c

Search before asking

  • I had searched in the issues and found no similar feature requirement.

Use case

As an engineer, I would like to connect DevLake to GitHub Copilot usage & impact data using a GitHub App installation so that:

  • We avoid storing user-owned PATs
  • Access is least-privilege, centrally managed, and revocable
  • The integration is not tied to a specific employee account
  • It aligns with enterprise security and compliance requirements

Description

Add support for GitHub App authentication to the GitHub Copilot plugin. Specifically, allow Copilot data collection to authenticate using:

  • GitHub App ID
  • Installation ID
  • Private key (PEM / secret reference)

The plugin should:

  • Allow users to configure both PAT and App authentication via the UI
  • Generate GitHub App installation access tokens
  • Automatically refresh tokens during collection
  • Support scheduled and long-running pipelines without token expiration failures

Existing PAT-based authentication should continue to work unchanged.

Related issues

No response

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Metadata

Metadata

Assignees

Labels

add-a-pluginThis issue is to add a plugincomponent/pluginsThis issue or PR relates to pluginstype/feature-requestThis issue is a proposal for something new

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions