> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rippit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# GitHub

> Let the Rippit agent read code, pull requests, issues, and workflow runs in the GitHub repositories you choose.

Connect GitHub when an answer needs the code or engineering work behind a customer complaint: the pull request that changed a flow customers are now confused by, the open issue tracking a bug support keeps seeing, or the failed deploy that lines up with a spike in tickets. The Rippit agent reads the repositories you allow and cites what it finds in its answer.

## What the agent gets

* **Code**: browse directories, read files, and search code on each repository's default branch.
* **Commits and pull requests**, with changed files, reviews, and review comments.
* **Issues** and their comments.
* **GitHub Actions** workflow runs and jobs, plus job logs if you turn them on.
* **Security alerts** from code scanning, Dependabot, and secret scanning, if you turn them on. Secret values are never returned.

Every GitHub tool is read-only. The agent cannot push code, open pull requests, comment, or change settings.

## Setup

GitHub connects through the Rippit GitHub App, so there is no URL, token, or OAuth app to set up.

**1. Install the app in GitHub**

Under **Connections → MCP Servers**, click **Connect** on GitHub. GitHub opens and asks you to install the Rippit app on an organization and choose which repositories it can read. If you are not an owner of that organization, GitHub sends the request to an owner, and you connect again after they approve it.

**2. Choose who can use it**

Back in Rippit, the connection card shows the repositories you selected. Under **Allowed Rippit users**, pick who can use the connection. It starts with only you. Everyone on the list shares access to every repository on the card.

**3. Turn on extra access, if you want it**

**Actions logs** and **Security alerts** are off by default. Turn them on in the connection's settings if you want the agent to read them.

To add or remove repositories later, click **Update Repo Access** on the connection card. Repository selection happens in GitHub, not in Rippit.

## Identity and scope

The connection belongs to the GitHub organization, not to any one person, and it is always shared at the organization level in Rippit. Only the Rippit users on the allowed list can use it. Each request the agent makes is limited to a single allowed repository.

This connects to GitHub.com organizations. GitHub Enterprise Server is not supported.

## Tools

| Tool | What it does |
| - | - |
| `list_allowed_repositories` | List the repositories this connection can read |
| `get_repository` | Read one repository's description, visibility, default branch, and settings |
| `list_directory` | List files and folders at a path |
| `read_file` | Read a range of lines from a text file |
| `search_code` | Search code in one repository |
| `list_commits` | List commits, optionally by path, author, or time |
| `get_commit` | Read one commit, with changed files and diff stats |
| `list_pull_requests` | List pull requests in one repository |
| `get_pull_request` | Read one pull request's body, branches, labels, and review and merge status |
| `list_pull_request_files` | List the files a pull request changed, with patch excerpts |
| `list_pull_request_reviews` | List the reviews on a pull request |
| `list_pull_request_review_comments` | List inline review comments on a pull request |
| `list_issues` | List issues, by state, label, or update time |
| `get_issue` | Read one issue |
| `list_issue_comments` | List comments on an issue or pull request |
| `list_workflow_runs` | List GitHub Actions workflow runs |
| `get_workflow_run` | Read one workflow run |
| `list_workflow_jobs` | List a run's jobs and step outcomes |
| `get_workflow_job_logs` | Read the end of a job's log. Needs **Actions logs** turned on |
| `list_code_scanning_alerts` | List code scanning alerts. Needs **Security alerts** turned on |
| `list_dependabot_alerts` | List Dependabot alerts. Needs **Security alerts** turned on |
| `list_secret_scanning_alerts` | List secret scanning alerts, without secret values. Needs **Security alerts** turned on |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.