Skip to main content

GitHub Integration

Connect Sophic to your GitHub organization to automatically capture knowledge from pull request discussions.

Install the app​

  1. Open Settings > Integrations in your Sophic dashboard
  2. Click Connect GitHub
  3. Install the Sophic GitHub App on your organization
  4. Select which repositories Sophic should monitor

The app requires the following permissions:

  • Pull requests — Read access to PR descriptions, reviews, and comments
  • Contents — Read access (used to resolve file references)

What gets captured​

Sophic monitors selected repositories for PR-related activity:

  • pull_request — PR opened, closed, synchronized, or reopened
  • pull_request_review — Reviews submitted, edited, or dismissed
  • pull_request_review_comment — Inline code review comments
  • issue_comment — Top-level PR discussion comments (only when the issue is actually a PR)

Each event triggers Sophic's ingestion pipeline, which creates or updates documents from the PR discussion. Repeated events on the same PR update the existing session rather than creating duplicates.

Monitored repositories​

After installation, you can manage which repositories Sophic watches from Settings > Integrations > GitHub in the dashboard. Only events from monitored repos are processed — all other webhook deliveries are silently ignored.

Security​

  • All webhook payloads are verified with HMAC-SHA256 using your configured GITHUB_WEBHOOK_SECRET
  • Installation tokens are scoped per-repository and short-lived
  • Sophic only reads PR content — it never writes to your repositories

Next steps​