> ## Documentation Index
> Fetch the complete documentation index at: https://docs.diffraction.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect GitHub

> Connect selected repositories to a configured Diffraction deployment.

Diffraction's hosted review entry point is a GitHub App. Access is scoped to the
repositories selected during installation.

## Before installation

The operator must configure the deployment's public URL, identity provider,
GitHub App, evidence storage, trusted sandbox harness, and production models.
The repository's [deployment runbook](https://github.com/jstEagle/Diffraction/blob/main/docs/deployment.md)
and [GitHub App setup guide](https://github.com/jstEagle/Diffraction/blob/main/docs/github-app-setup.md)
cover those steps. They are operator references, not an assertion that hosted
reviews are already available.

## Install for your workspace

1. Sign in to the configured Diffraction deployment.
2. Open its `/install` page to start installation with signed workspace state.
3. Select the repositories that Diffraction should review.
4. Complete GitHub authorization and return to Diffraction.
5. Add [repository configuration](/docs/site/configuration) to the selected project.

Start from Diffraction so the callback can associate the installation with the
authenticated workspace. Installation access is verified through GitHub before
the connection is persisted.

## Permissions and events

The Diffraction App requests read access to contents and metadata, plus read/write
access to Checks and pull requests to publish review results. Installation
credentials remain outside the untrusted application sandbox.

Pull request actions `opened`, `reopened`, `synchronize`, and `ready_for_review`
enter review intake. Diffraction verifies the revision and evaluates whether the
change can affect the UI before proceeding. The production path updates a Check
and summary with links to authenticated review evidence.