Create and configure the App
Create a GitHub App with repository Contents and Metadata read access. Grant Pull requests and Deployments read and write access when using Preview deployments. Subscribe topush, pull_request, and installation events.
Set the webhook URL to ${TOWBAR_API_BASE_URL}/v1/public/webhooks/github and the setup URL to ${TOWBAR_APP_BASE_URL}/manage/integrations/github, with redirect enabled. Generate a private key, then configure:
base64 < private-key.pem | tr -d '\n'. Restart the API. Startup fails if the key cannot be parsed or any enabled field is missing.
Install and use it
Open Manage → Integrations → GitHub and choose Install GitHub App. Select only the accounts and repositories Towbar should manage. The connection widget is shown only because the runtime configuration is valid; no credential form is exposed.
The installation action appears after the GitHub App environment values pass startup validation.
Verify access
The connection card shows the installed account, account type, installation ID, and Preview reporting readiness. A healthy installation must remain active in GitHub and include Contents read access. Preview reporting also needs Pull requests and Deployments read and write access. Towbar never displays the App private key or webhook secret.Maintain the connection
Use Review permissions after adding App permissions or repositories. Use Reconnect GitHub when GitHub suspends or removes the installation. If webhooks stop arriving, inspect the App’s recent deliveries in GitHub and confirm that the callback URL matchesTOWBAR_API_BASE_URL. Rotating the private key or webhook secret requires updating the environment and restarting the API.