GitHub

StackHawk’s official GitHub App integration.

Overview

StackHawk provides several features to integrate with GitHub. These features are all offered under the official StackHawk GitHub App. These individual pages will detail specific features of the GitHub App, while this page will cover requirements and installation details.

Features

• Connect via our marketplace app or from the Integrations page
• View repository metadata with each scan
• Incorporate scan results into pull request checks
• Import correlated SAST findings from GitHub CodeQL
• Connect multiple GitHub organizations to a single StackHawk org

Requirements

StackHawk

• You must have a StackHawk account.
• Your StackHawk account needs to be on a Pro or Enterprise plan to use the GitHub integration.

GitHub

• You must be allowed to install GitHub Apps to your organization / account.

Setup

1. Log into StackHawk and visit the GitHub Integration page.
2. Click Enable GitHub. If you already have a GitHub org connected but need to modify, click Manage Connection.
3. Follow the prompts in GitHub to select your GitHub Organization / Account. This will require that you are a GitHub administrator for your organization. Once in the GitHub org, you can select individual repositories to allow or give access to all. Once you have made your selection, click Install.
4. You will be navigated back into StackHawk. Please note that the import process may take a few minutes depending on the size of your organization. You can check your progress by navigating to the StackHawk Repositories page.
5. Once completed, you should have a list of all of your repositories available in StackHawk with key metadata to help inform your next steps.
6. If you already have applications in StackHawk, you can easily link them to a repository via the Add to existing application menu item on each row or via the ‘Create Applications’ button above the table once at least one row has been selected.
7. If you are new to StackHawk, you can use this Repositories view to quickly create and configure new applications that will be mapped directly to your code.
8. These mappings of repository to StackHawk application unlock additional features such as our SAST integration with GitHub CodeQL, GitHub Pull Request checks, and automation with GitHub Actions.

Allowed IP Addresses

• 44.227.38.189
• 54.69.98.33
• 44.227.81.160