Connect GitHub

The MacOps GitHub App is the easiest way to connect — one click, no tokens or webhooks to copy. It powers CI on push, PR checks, and on-demand Actions runners.

Install the app

1. Dashboard → GitHub runners → Install on GitHub.
2. On GitHub, choose All repositories or select specific repos, and approve.
3. You're returned to MacOps with the connection ready. MacOps authenticates with short-lived installation tokens — no long-lived secret is ever stored.

What you get

• CI on push — every push runs a build/test for the matching project at that commit.
• PR checks — a macops/ci commit status moves from pending → success/failure, linked to the build.
• Private clones — the build VM clones your private repo with a short-lived token; nothing is stored.
• Actions runners — see GitHub Actions runners.

Prefer a token?

If you can't install an app, use a fine-grained PAT instead: GitHub runners → Use a token instead. Scope it to your repo(s)/org with Administration: read & write and Actions: read; MacOps stores it encrypted and gives you a per-connection webhook URL to add (events: push, pull_request, workflow_job).