> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agentgg.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect GitHub

> Install the AgentGG App, choose repositories, then turn on pull request scans for each one.

Connect a GitHub account to scan its repositories from the platform and get automatic pull request scans.

<Warning>
  A GitHub account connects to one AgentGG organization at a time. If it is already connected to another organization, uninstall the AgentGG App from that account on GitHub first, then connect it here.
</Warning>

## Connect an account

<Steps>
  <Step title="Open the GitHub page">
    Select **GitHub** in the sidebar.
  </Step>

  <Step title="Start the connection">
    Select **Connect repos**. GitHub opens in a new tab.
  </Step>

  <Step title="Choose repositories">
    On GitHub, install the AgentGG App on an account, then grant it all repositories or select individual ones.
  </Step>

  <Step title="Confirm the connection">
    GitHub returns you to a confirmation page. Review the account and the repositories listed, then select **Connect**.
  </Step>
</Steps>

The account now appears on the **GitHub** page, with every repository it can access.

## Pick repositories and turn on pull request scans

Each connected repository lists four controls: **Run scan**, **Workspaces**, **Agents**, and **PR scans**.

| Control    | What it does                                                                                                |
| ---------- | ----------------------------------------------------------------------------------------------------------- |
| Run scan   | Starts a scan of the repository now.                                                                        |
| Workspaces | Choose which workspaces the repository's scans appear in.                                                   |
| Agents     | Choose which agents run pull request scans for the repository. Leave it on default to use the base library. |
| PR scans   | When on, the platform scans every future pull request for this repository.                                  |

Turn on **PR scans** for a repository you want scanned on every pull request. Leave it off for a repository you only scan with **Run scan**.

On GitHub, select **Add or remove repos on GitHub** at any time to change which repositories the AgentGG App can access.

## What a check run looks like

Each pull request gets a check named **AgentGG security scan**. It starts **in progress**, then completes as:

| Result  | Meaning                                                                                                         |
| ------- | --------------------------------------------------------------------------------------------------------------- |
| Pass    | No findings.                                                                                                    |
| Neutral | Only medium or low severity findings. Does not block a merge.                                                   |
| Fail    | At least one critical or high severity finding. Can block a merge if your branch protection requires the check. |

The check's title names the finding count, for example **AgentGG: 3 findings (1 critical, 2 medium)**. Select the check for a link back to the scan.

## What a review comment looks like

The platform also posts each finding as a comment on the changed line it applies to. A comment is collapsed by default. It shows the severity and the title, for example **High · SQL injection**. Open it to read the summary, details, a proof of concept, impact, and reference links.

A summary comment at the top of the review names the total finding count, with a link to the full scan.