Skip to main content
The GitHub integration discovers your organization’s members, teams, repository access patterns, and outside collaborators — essential for offboarding, access review, and SOC 2 evidence.

What you’ll need

  • GitHub Organization Owner role on the org you want to connect.
  • Two minutes.

Set it up

1

Open the GitHub integration in Layer

In Layer, go to Integrations, find GitHub, and click Connect.
2

Install the Axiom GitHub App

You’ll be redirected to GitHub. Choose the organization to install on, then pick All repositories (recommended for full inventory) or specific repos.
3

Approve the requested permissions

The Axiom GitHub App requests read-only access to:
  • Repository: Metadata, Contents, Issues, Pull requests
  • Organization: Members, Administration
Click Install.
4

Wait for the first sync

The initial sync runs immediately. Larger orgs (1,000+ members) may take 15-20 minutes.

What gets synced

ObjectFieldsRefresh cadence
Memberslogin, name, email, role (member/admin), 2FA enabledEvery 6 hours
Teamsname, description, members, parent teamEvery 6 hours
Outside collaboratorslogin, repos accessedDaily
Repository accessrepo, who has read/write/admin accessDaily

Why GitHub App, not OAuth or PAT

GitHub Apps issue fine-grained, expiring tokens scoped to the specific resources you authorized. Personal Access Tokens (the old way) grant a single user’s full account access until manually revoked — much worse for least-privilege.

Troubleshooting

Re-check that you installed on the organization, not your personal account. Reinstall via github.com/settings/installations and pick the org.
Go to Integrations → GitHub → Disconnect in Layer, then uninstall the Axiom app from github.com/organizations/YOUR_ORG/settings/installations.