Skip to content

docs: clarify GitHub repo access patterns for cloud agents (flexible environments) - #390

Draft
seemeroland wants to merge 1 commit into
mainfrom
oz-agent/REMOTE-2341-github-repo-access-docs
Draft

docs: clarify GitHub repo access patterns for cloud agents (flexible environments)#390
seemeroland wants to merge 1 commit into
mainfrom
oz-agent/REMOTE-2341-github-repo-access-docs

Conversation

@seemeroland

Copy link
Copy Markdown
Contributor

Summary

Addresses enterprise customer feedback (Gametime, REMOTE-2341) about discoverability of GitHub repo access patterns for Oz cloud environments.

Problem: Gametime wanted to set up a flexible base environment where the agent handles all cloning and setup dynamically. They asked whether to use the Oz GitHub integration or add a GitHub token secret. The answer wasn't clearly documented.

What's documented now:

  1. Oz GitHub App (Pattern 1) — recommended for fully automated agent API key runs. Warp automatically mints a GitHub App installation token scoped to the repos configured in the environment.
  2. GitHub PAT as a Warp-managed secret (Pattern 2) — works for all run types, including flexible environments with no repos pre-configured.

Key clarification added: The GitHub App token is only generated when at least one repo is declared in the environment configuration. For flexible base environments (no repos configured, agent clones on the fly), Pattern 2 (PAT secret) is required.

Changes

  • New guide guides/agent-workflows/github-repo-access-for-cloud-agents.mdx:

    • Side-by-side comparison table of both patterns
    • Step-by-step setup for each approach
    • Explicit guidance for the flexible base environment use case
    • Callout about the GitHub App token limitation for repo-less setups
  • platform/environments.mdx: Added crosslinks to the new guide in the "Before you begin" prerequisites and in the "Common issues" section for GitHub authorization errors.

  • platform/team-access-billing-and-identity.mdx: Added a callout in the "How this relates to environments" section explaining the flexible environment limitation and pointing to Pattern 2 (PAT secret) as the solution.

  • src/sidebar.ts: Registered the new guide in the Agent workflows sidebar section.


Conversation: https://staging.warp.dev/conversation/0432ec75-0db2-43bd-99c4-ec337684e356

Run: https://oz.staging.warp.dev/runs/019fa4f6-9ebf-7845-8267-d3f74a8b342b

This PR was generated with Oz.

Documents the two GitHub repo access patterns for cloud environments:
1. Oz GitHub App + agent API key (SA-scoped runs)
2. GitHub PAT as a Warp-managed secret

Includes:
- New guide: guides/agent-workflows/github-repo-access-for-cloud-agents.mdx
  - Comparison table of both patterns
  - Step-by-step setup for each approach
  - Flexible base environment pattern (no pre-configured repos)
  - Clear callout about GitHub App token limitation for repo-less environments
- environments.mdx: Add crosslinks to new guide in prerequisite and common issues sections
- team-access-billing-and-identity.mdx: Add note about flexible environment limitation in Team GitHub authorization section
- sidebar.ts: Register new guide in Agent workflows sidebar section

Addresses Gametime enterprise feedback: clarifies that flexible base
environments (where agent handles cloning) require Pattern 2 (PAT secret)
because the GitHub App token is not generated when no repos are configured.

Co-Authored-By: Oz <oz-agent@warp.dev>
@cla-bot cla-bot Bot added the cla-signed label Jul 27, 2026
@vercel

vercel Bot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Error Error Jul 27, 2026 7:15pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant