Onboard GitHub - Netskope Knowledge Portal

The installation instruction describes how to integrate your GitHub account with Netskope. To configure GitHub for SaaS Security Posture Management, you need to authorize Netskope as a web application client to access your GitHub account.

Prerequisites

You should have a GitHub enterprise cloud license to integrate GitHub with SaaS Security Posture Management (SSPM).

Any non-enterprise licensed GitHub instances that are already integrated with SaaS Security Posture Management will stop receiving repository updates. You should upgrade your license and then re-grant the GitHub instance.

Step 1 : Install Netskope SSPM GitHub App in GitHub

Prerequisites:

Ensure that you are logged in to your GitHub organization account before accessing the github URLs.
If you are not sure of the management plane location of your tenant, contact your sales representative or Netskope support.

Procedure:

To install the Netskope SSPM GitHub app in the GitHub organization:

Log in to www.github.com using your GitHub organization account.
Install the Netskope SSPM GitHub app.
Click Install.
Select the organization name where you want to install.
Select All repositories and click Install. Keep the installation options unchanged.

Once installed, you should see a successful message.

If you have configured the IP allow list in your GitHub Organization environment, you need to add Netskope IP address in the list as per your Home POP to access your GitHub details in Netskope. Refer Netskope SSPM IP addresses for Allowlisting to add IPs to the list.

Step 2 : Configure GitHub Instance in the Netskope UI

To authorize Netskope to access your GitHub instance:

Log in to the Netskope tenant UI and go to Settings > Configure App Access > Next Gen > Security Posture.
Select the GitHub icon, and then click Setup Security Posture Instance.
The Setup Security Posture Instance window opens. Enter the following details:
- Environment: Select the applicable environment.
- GitHub Organization Name: Enter the name of the GitHub organization. The organization name must match the GitHub organization where you installed the Netskope GitHub App. It is case-sensitive.
- GitHub Administrator Email: Enter the email address of the GitHub administrator who installed the Netskope GitHub App.
- Select the Security Scan Interval. Select how often Netskope scans the GitHub organization for security posture misconfigurations.
- Instance Name (Optional): Enter a display name for this GitHub instance. If specified, use the GitHub organization name. It is case-sensitive.
Click Grant Access for the app instance you just created.
It will automatically authorize the GitHub app and then refresh your browser, and you will see the instance.

References

Step 1 : Install Netskope SSPM GitHub App in GitHub

Prerequisites:

Ensure that you are logged in to your GitHub organization account before accessing the github URLs.

If you are not sure of the management plane location of your tenant, contact your sales representative or Netskope support.

Procedure:

To install the Netskope SSPM GitHub app in the GitHub organization:

Install the Netskope SSPM GitHub app.

Click Install.

Select the organization name where you want to install.

Select All repositories and click Install. Keep the installation options unchanged.

Once installed, you should see a successful message.

Step 2 : Configure GitHub Instance in the Netskope UI

To authorize Netskope to access your GitHub instance:

Select the GitHub icon, and then click Setup Security Posture Instance.

The Setup Security Posture Instance window opens. Enter the following details:

Environment: Select the applicable environment.
GitHub Organization Name: Enter the name of the GitHub organization. The organization name must match the GitHub organization where you installed the Netskope GitHub App. It is case-sensitive.
GitHub Administrator Email: Enter the email address of the GitHub administrator who installed the Netskope GitHub App.
Select the Security Scan Interval. Select how often Netskope scans the GitHub organization for security posture misconfigurations.
Instance Name (Optional): Enter a display name for this GitHub instance. If specified, use the GitHub organization name. It is case-sensitive.

Click Grant Access for the app instance you just created.

It will automatically authorize the GitHub app and then refresh your browser, and you will see the instance.

References