> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usekestrel.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# GitHub

> Connect GitHub for GitOps deployments, causal PR detection, and IaC remediation via pull requests

The GitHub integration connects Kestrel to your GitHub repositories, enabling GitOps deployments, Infrastructure-as-Code remediation, and causal PR detection during incident investigation.

## Prerequisites

* **Organization Admin** role in Kestrel
* GitHub organization admin access

## Setup

<Steps>
  <Step title="Install the GitHub App">
    1. Navigate to **Integrations → CI/CD** in your Kestrel dashboard
    2. Click **Connect GitHub**
    3. Select your GitHub organization in the installation page
    4. Choose which repositories to grant access to (all or selected)
    5. Click **Install & Authorize**
  </Step>

  <Step title="Configure IaC repositories (optional)">
    To enable IaC remediation on a repository:

    1. Expand the GitHub card to view your repositories
    2. Click **Configure IaC** on the target repository
    3. Select the IaC type: **Terraform**, **CloudFormation**, or **Pulumi**
    4. Set the root path (e.g., `/` or `/terraform`)
    5. Optionally link a cloud account (AWS or OCI) to match resources to the correct repository
    6. Click **Enable IaC**
  </Step>
</Steps>

### Managing Repository Access

Repository access is managed through your GitHub App installation settings:

1. Go to your GitHub organization settings
2. Navigate to **Installed GitHub Apps → Kestrel AI**
3. Update the repository selection

## How It's Used

### In Workflows

**Action blocks:**

* **Create Pull Request** — open a pull request with specified branch, title, and body
* **Create Issue** — create a GitHub issue with labels, assignees, and body content
* **Trigger GitHub Action** — trigger a GitHub Actions workflow run on a specified branch
* **Wait for GitHub Action Run** — block workflow execution until a GitHub Actions run completes
* **Get GitHub Action Status** — retrieve the current status of a GitHub Actions workflow run
* **Read File** — read a file from a repository at a specified ref
* **Search Code** — search repository code for patterns or keywords
* **AI Code Investigation** — run an AI-powered investigation across repository code
* **AI Code Fix** — generate an AI-powered code fix and commit it to a branch
* **Wait for PR Approval** — block workflow execution until a pull request is approved
* **Wait for PR Merge** — block workflow execution until a pull request is merged
* **Investigate GitHub Action Failure** — fetch failed job logs from a GitHub Actions run and use AI to analyze the root cause, providing a summary of what failed and suggested fixes

Example: A workflow triggered by a Kubernetes incident searches the repo for the affected service code, runs an AI investigation, creates a fix PR, and waits for approval before merging.

### In Incident Response

* **Causal PR detection** — during root cause analysis, Kestrel identifies recent PRs/deployments that may have caused the incident
* **YAML fix PRs** — click **Create Pull Request** on any AI-generated Kubernetes fix to open a PR with the change
* **IaC remediation** — when Kestrel detects a cloud misconfiguration, it identifies the Terraform file managing that resource and opens a PR with the fix
* **Knowledge source** — repository content provides context during incident investigation

### In Cloud AI Copilot

* Deploy AI-generated configurations via pull request from the chat interface
* Ask about recent deployments: `What PRs were merged to production in the last 24 hours?`
* Browse repository contents for IaC and Kubernetes manifests

## IaC Remediation Workflow

For cloud incidents with connected IaC repositories:

1. Kestrel detects a cloud misconfiguration (e.g., S3 bucket with public access)
2. Kestrel identifies the Terraform file managing that resource across all connected repositories
3. Kestrel generates a Terraform fix
4. Click **Create Pull Request** to open a PR with the remediation
5. The PR includes the full diff, fix description, and a link back to the incident

## Disconnecting

To modify or remove the integration, manage the GitHub App installation from your GitHub organization settings.