Prerequisites
- Admin or owner access to the GitHub organization you want to connect
- Access to Pavo platform
Step 1: Generate a GitHub Personal Access Token (PAT)
1.1 Go to GitHub token settings
Navigate to: GitHub → Settings → Developer settings → Personal access tokens → Fine-grained tokens Direct link: https://github.com/settings/tokens?type=betaUse fine-grained tokens over classic tokens. They allow repo-level scoping and are the recommended approach.
1.2 Create a new token
Click “Generate new token” and fill in:If the org doesn’t appear under Resource owner, an org admin needs to enable fine-grained PAT access: Org Settings → Personal access tokens → Settings → Allow access via fine-grained personal access tokens.
1.3 Set repository access
Choose one of:- All repositories — grants access to every repo in the org (use for full onboarding)
- Only select repositories — pick specific repos (use when scoping to a subset)
1.4 Set permissions
Under Repository permissions, grant:
All other permissions can stay at No access.
These are the minimum permissions needed. Do not grant write access — Pavo only reads data.
1.5 Generate and copy
Click “Generate token”. Copy the token immediately — GitHub won’t show it again. The token will look like: github_pat_XXXX… (fine-grained) or ghp_XXXX… (classic). By default, fine-grained tokens targeting an org need admin approval before they become active. After generating, the token stays in a “pending” state until an org admin approves it under Org Settings → Personal access tokens → Pending requests. Ask your org admin to approve it, or have the admin generate the token directly to skip this step.Step 2: Connect GitHub to Pavo
2.1 Navigate to the connector page
In Pavo, go to Connectors → GitHub.2.2 Fill in the fields
2.3 Connect
Click Connect. If successful, the status changes from “Not Connected” to connected and Pavo begins ingestion.Notes
- Pavo ingests repos, PRs, and code. It does not write back to GitHub.
- One connector per org per project. To connect multiple orgs, create separate connectors.
- For classic tokens (ghp_…): go to https://github.com/settings/tokens and select scopes repo (read) and read:org. Fine-grained is preferred.