> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blitzy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# GitHub Enterprise Server

> Connect a self-hosted GitHub Enterprise Server instance to Blitzy for AI-Native code generation

GitHub Enterprise Server (GHES) integration lets Blitzy connect to your self-hosted instance. It uses a manifest-based app registration flow that creates a private GitHub App directly on your GHES instance -- no marketplace listing required.

If you use GitHub.com or GitHub Enterprise Cloud, see [GitHub](/integrations/github) instead.

## Setup

<Steps>
  <Step title="Start the connection">
    Navigate to **Settings > Integrations** in your Blitzy dashboard and click **Connect GitHub Enterprise**.
  </Step>

  <Step title="Enter your instance domain">
    Provide your GitHub Enterprise Server domain (e.g., `github.yourcompany.com`). Blitzy registers the app on your GHES instance via the manifest flow.
  </Step>

  <Step title="Install the app">
    You are automatically redirected to GHES to review and install the app. Select repository access -- grant access to **all repositories** or **specific repositories**.
  </Step>
</Steps>

<Note>You must have admin access to your GitHub Enterprise Server instance to register and install the app.</Note>

## Permissions

The Blitzy GitHub Enterprise App requires the following permissions, scoped to the minimum level needed:

| Permission                         | Access Level | Purpose                                                               |
| ---------------------------------- | ------------ | --------------------------------------------------------------------- |
| Actions                            | Read & Write | Trigger, monitor, and cancel workflow runs                            |
| Actions variables                  | Read & Write | Read and update Actions configuration variables                       |
| Attestations API                   | Read & Write | Sign and verify build artifact provenance                             |
| Checks                             | Read & Write | Post check runs and status annotations on commits and PRs             |
| Code                               | Read & Write | Clone repos, read files, create branches, and push commits            |
| Codespaces                         | Read & Write | Launch and manage development environments for code generation        |
| Commit statuses                    | Read & Write | Set pass/fail status indicators on individual commits                 |
| Custom properties for repositories | Read & Write | Read and update repository-level custom metadata fields               |
| Dependabot alerts                  | Read         | Surface known dependency vulnerabilities during code analysis         |
| Deployments                        | Read & Write | Create deployments and update deployment status                       |
| Discussions                        | Read & Write | Create and respond to repository discussion threads                   |
| Environments                       | Read & Write | Configure deployment targets and environment protection rules         |
| Issues                             | Read & Write | Open, update, close, and comment on issues                            |
| Merge queues                       | Read & Write | Add and remove pull requests from merge queues                        |
| Metadata                           | Read         | Discover repositories, branches, and collaborators                    |
| Packages                           | Read & Write | Publish and install GitHub Packages artifacts                         |
| Pages                              | Read & Write | Configure and deploy GitHub Pages sites                               |
| Pull requests                      | Read & Write | Open, update, close, and review pull requests                         |
| Repository advisories              | Read & Write | Review and manage security advisories tied to repository dependencies |
| Repository hooks                   | Read & Write | Register and manage webhook endpoints for event delivery              |
| Secret scanning alerts             | Read & Write | Triage and resolve detected secrets in code                           |
| Secrets                            | Read & Write | Store and rotate Actions and Codespaces secrets                       |
| Security events                    | Read & Write | Access code scanning and audit log security data                      |
| Workflows                          | Read & Write | Create and modify GitHub Actions workflow definition files            |

### Webhook Events

The app subscribes to the following webhook events:

| Event          | Purpose                         |
| -------------- | ------------------------------- |
| `installation` | Track app install/uninstall     |
| `repository`   | Detect new/removed repositories |
| `pull_request` | React to PR lifecycle events    |
| `status`       | Monitor commit status changes   |

## Organization Repositories

Organization admins must install and approve the Blitzy GitHub Enterprise App:

1. Verify you have admin access to the organization
2. Install the app (organization owners may need to approve)
3. Select which organization repositories to grant access
4. Team members can then connect their accounts to access authorized repositories

## Differences from GitHub.com / Enterprise Cloud

|                             | GitHub.com / Enterprise Cloud   | Enterprise Server                                        |
| --------------------------- | ------------------------------- | -------------------------------------------------------- |
| App creation                | Install from GitHub Marketplace | Manifest-based private app on your instance              |
| Domain                      | `github.com`                    | Your self-hosted domain (e.g., `github.yourcompany.com`) |
| Organization administration | Not required                    | Not required                                             |
| App visibility              | Public marketplace listing      | Private to your instance                                 |