GitHub Integration with WatchGuard CloudDR

Applies To: WatchGuard CloudDR This topic applies to the WatchGuard Cloud Detection and Response product.

GitHub is a cloud-based platform for version control and collaboration that enables individuals and teams to store, manage, and share their code and projects. GitHub offers a wide range of features such as issue tracking, pull requests, code review, and continuous integration. This guide describes how to integrate GitHub with CloudDR.

Available Features

• Misconfiguration Rules
• Identity Rules
• User Inventory
• Discovered Application Inventory
• Discovered Application Rules

Prerequisites

To configure this integration, you must have:

• A GitHub user account with required privileges, or you can use the owner account and a Personal Access Token (Classic) with the required privileges.

Required Privileges

To configure this integration, you must have these privileges assigned to the user.

Scope	Use
repo	Access repositories [Meta Data]
admin:org	Read organizations, teams, and organization projects
user	Read all user data
admin:enterprise	Read enterprises
audit_log	Read audit log
read:project	Read projects [Meta Data]

Create a Personal Access Token (Classic)

To create a Personal Access Token (Classic):

1. Log in to the account that has the required scope at https://github.com/settings/apps.
2. Expand the Personal access tokens drop-down list. Select Tokens (classic).
3. Expand the Generate new token drop-down list. Select Generate new token (classic).
4. In the Note section, add a description of what this token is used for.
5. From the Expiration drop-down list, select No expiration.
6. In the Select scopes section, select these scopes:
   • admin: enterprise
   • admin: org
   • public_repo
   • read: project
   • repo: status
   • security_events
   • user
   • read: audit_log
7. Click Generate token. Copy and save the token in a secure location.

Configure the GitHub Integration in CloudDR

To integrate GitHub with CloudDR:

1. In WatchGuard Cloud, select Configure > CloudDR.
2. Select the Integrations tab.
3. (Service Providers) From the Select Integrations View drop-down list, select Add Integrations.

   

4. In the GitHub widget, click Add.
5. Click Start Integration.
6. On the Organization page, in the Organization text box, enter your GitHub organization name. To find your GitHub organization name:
   1. Log in to your GitHub account.
   2. Select your profile picture to open the user navigation menu. Select Organizations.
   3. On the Organization page, copy the organization name that shows in the address bar. For example, https://github.com/example where example is your organization name.
7. Click Next.
8. On the API Token page, in the API token text box, paste the API token you previously saved.
9. Click Submit.

Related Topics

About WatchGuard CloudDR Integrations