Versions Compared

Old Version 18

changes.mady.by.user Rinkesh Goyal

Saved on

compared with

New Version 19

changes.mady.by.user Christine Gross

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

Note: You must use organization’s owner account to setup the OAuth app and authenticate it. The owner account is also required to get outside collaborators.

Steps To Create a Github Connector

1. Sign in to Github. In the upper-right corner of any page, click your profile photo, then click Settings.

...

3. In the left sidebar, click OAuth Apps, then click Register a new application.

...

4. Name your Zilla connector then click Register application.

Homepage URL should be https://app.zillasecurity.com/

...

For the Authorization callback URL simply copy and paste https://app.zillasecurity.com/api/auth/callback/github into the text box.

Setup Github Application Integration on Zilla

1. Locate your desired Github application instance on Zilla, click Sync now in the top right and enable API Integration.

  • Find the Client Id and Secret you obtained in the last step and enter them into the corresponding boxes. For Organization Id, enter the username of your organization on Github (located at Your Organizations tab when you click profile image at upper right corner). For "Sync repositories as resource permissions", choose Yes if the integration should sync user access for each repository within the organization. This option results in additional Repository Role permissions in the Available Permissions.

  • Enable account modifications? (Yes/No) - Yes will automatically revoke group memberships, repository permissions for a user, outside collaborators, outside collaborators' permissions to a repo and organization membership/inside collaborators and permissions (except for owner permissions) that have been flagged for revocation after an access review during a sync.

Info

Note:

  1. When updating the “Sync repositories as resource permissions” setting from No to Yes, you must revoke all user tokens in Github

...

If you are trying to sync GitHub’s Enterprise Server into Zilla then you have to add your domain as config otherwise leave it blank.

...

  1. .

  2. Revoking membership for an organization will remove that user from organization.

  3. GitHub has a concept of orphan organization i.e. organization with no owner. Make sure there are more than one owner if you are revoking ownership of an organization for a user.

  4. Revoking an outside collaborators' repository permission will remove him/her from the organization also only if he/she is not a member of any other repository.

  5. Zilla does not support organization’s ownership revocation. User will have to manually revoke the ownership directly in Github.

Image Added

If “Sync repositories as resource permissions” is Yes, on the Permissions tab additional permissions are displayed for each account (e.g., “admin: repo1“, “maintain: repo2”, “read: repo3”, “triage: repo4”, “write: repo5”).

...

4. Once complete you may view the data on in Zilla.

Info

Troubleshooting GitHub Integration:

  1. Error 401 - This could due to expired access token or the user trying to sync does not have admin or owner access to GitHub’s account. Try reauthenticating the GitHub instance will resolve the error and if the issue still persist contact your admin for right access.

  2. Error 403 - This error could be due to insufficient scopes, please ensure that the scopes provided for zilla connector should be same as mentioned in these document. Error 403 could also occur if the organization has enabled OAuth App Access Restrictions, disabling the restriction would fix the issue. Refer this document for disabling the OAuth app access restrictions.

  3. Error 422 - This could also occur because your organization has enabled OAuth App Access Restrictions. Refer this document for disabling the OAuth app access restrictions.

  4. Error 400 - This could be due to API error please contact support@zillasecurity.com.

...