GitHub
Minerva sees only the repositories you install its GitHub App on; the connection links to installing it on more. Within those, you choose per repository what agents may do.
Permissions
Section titled “Permissions”| Permission | What agents can do |
|---|---|
| Read code, issues and pull requests | List repositories, read a repository’s details, list and read issues and pull requests with their comments and changes, read text files and list folders. |
| Open issues and comment | Open issues with a title and text, and comment on issues and pull requests. |
Risks to weigh
Section titled “Risks to weigh”- Agents act as you. Issues and comments appear under your GitHub account, and watchers are notified. Workflows and bots that react to new issues or comments may act on them.
- Public repositories are public. An issue or comment on a public repository can be read by anyone, so it is a way out for anything the agent read.
- Anyone can write to a public repository’s issues. Agents read text from people outside your company there, and it can contain instructions meant for them.
- All repositories covers repositories added later, as soon as the App is installed on them.
What agents cannot do
Section titled “What agents cannot do”Agents cannot push code, open, review or merge pull requests, or close, edit, label or assign issues. New issues have only a title and text.