github-setup.html

<!doctype html>
<html lang="en" data-theme="light">
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <title>Set up GitHub. Agentic DevSecOps</title>
  <meta name="description" content="Install the GitHub Enterprise setup skill in Copilot CLI, assess your workspace, and review a plan before approving changes." />
  <link rel="preconnect" href="https://fonts.googleapis.com" />
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Outfit:wght@500;600;700;800&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet" />
  <link rel="stylesheet" href="assets/css/styles.css" />
  <link rel="stylesheet" href="assets/css/shell.css" />
  <link rel="stylesheet" href="assets/css/routes.css" />
  <link rel="icon" href="assets/img/logo-mark-white.png" />
</head>
<body>
  <header class="nav" role="banner">
    <!-- Edit this shared template; docs/build.js updates the page headers. -->
    <div class="nav-inner">
      <a class="brand" href="index.html" aria-label="RVAS, Agentic DevSecOps">
        <img src="assets/img/logo-full.png" alt="RVAP" class="rvap-nav-logo" height="32">
      </a>
      <nav id="navLinks" class="nav-links" aria-label="Primary">
        <a href="index.html">Home</a>
        <a href="catalog.html" data-nav-pages="challenge.html module.html">Catalog</a>
        <a href="builder.html" data-nav-pages="set.html">Build a set</a>
        <a href="github-setup.html" data-nav-pages="github-setup-guide.html" aria-current="page">Set up GitHub with a skill</a>
        <a href="module.html?m=ghec">GHEC</a>
        <a href="module.html?m=ghas">GHAS</a>
        <a href="module.html?m=ghaw">GHAW</a>
        <a class="gh" href="https://github.com/microsoft/frontier-agentic-devops-rvas" target="_blank" rel="noopener"
          aria-label="View source on GitHub">GitHub ↗</a>
      </nav>
      <div class="nav-actions">
        <button class="icon-btn nav-toggle" type="button" aria-label="Open navigation menu" aria-expanded="false"
          aria-controls="navLinks">
          <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"
            stroke-linecap="round" aria-hidden="true">
            <path d="M3 6h18M3 12h18M3 18h18" />
          </svg>
        </button>
      </div>
    </div>
  </header>
  <main>
    <section class="hero" aria-labelledby="setupHeading">
      <div class="wrap">
        <span class="eyebrow">GitHub Enterprise setup skill</span>
        <h1 id="setupHeading">Plan before<br /><span class="accent">you change GitHub.</span></h1>
        <p class="lede">Tell Copilot what your enterprise needs. The skill checks GitHub, recommends changes, and saves a plan for you to review.</p>
        <div class="hero-actions">
          <a class="btn btn-primary" href="github-setup-guide.html#start">Install and start &rarr;</a>
          <a class="btn btn-ghost" href="github-setup-guide.html#questions">Already installed? Start a plan</a>
        </div>
      </div>
    </section>
    <div class="wrap setup-content">
      <nav class="setup-subnav" aria-label="On this page">
        <a href="#first-plan">Start here</a><a href="#scope">Scope</a><a href="#capabilities">Capabilities</a><a href="#examples">Example prompts</a><a href="#boundaries">Prerequisites and limits</a>
      </nav>
      <section id="first-plan" aria-labelledby="firstPlanHeading">
        <h2 id="firstPlanHeading">Get to your first plan</h2>
        <p>You need an existing GitHub Enterprise Cloud account, Copilot CLI, <code>gh</code>, and <code>jq</code>. The skill helps you plan changes; it does not create the enterprise account.</p>
        <ol class="setup-start-steps">
          <li>
            <a href="github-setup-guide.html#start">Install the plugin</a>
            <p>Add the setup skill to Copilot CLI. If it is already installed, go straight to your goal.</p>
          </li>
          <li>
            <a href="github-setup-guide.html#questions">Describe your goal</a>
            <p>Name your enterprise, host, and organizations. Plan mode checks GitHub without making changes.</p>
          </li>
          <li>
            <a href="github-setup-guide.html#apply">Review the saved plan</a>
            <p>Check the proposed changes and cost or license effects. Request Apply only when ready, then approve each write batch.</p>
          </li>
        </ol>
        <p class="setup-preview"><strong>Preview:</strong> live end-to-end setup validation is still pending. Complete a controlled live setup before production use.</p>
      </section>
      <section id="scope" aria-labelledby="scopeHeading">
        <h2 id="scopeHeading">Set up or align an enterprise</h2>
        <p>Use the skill for coordinated changes across an existing GitHub Enterprise Cloud account on <code>github.com</code> or your enterprise's <code>ghe.com</code> host.</p>
        <p>Describe the outcome in your own words. For example, align organization governance, set up teams and repository access, or roll out Copilot. The skill narrows the work to that outcome.</p>
        <ul>
          <li><strong>Organization and access:</strong> plan landing zones, identity requirements, and team access.</li>
          <li><strong>Repositories and delivery:</strong> plan repository factories, rulesets, and Actions policies.</li>
          <li><strong>Security and Copilot:</strong> assess rollout needs, settings, and licensing effects.</li>
          <li><strong>Governance:</strong> trace effective policy to its source and track work another owner needs to do.</li>
        </ul>
        <p><strong>One prompt starts the guided workflow.</strong> In Plan mode, the agent inspects GitHub without making changes and prioritizes its recommendations. It asks only for unresolved decisions, one at a time.</p>
        <p>The skill can run required read-only inventories within your requested scope without asking for another approval. Copilot's tool permissions and your organization's policies still apply.</p>
      </section>
      <section id="capabilities" aria-labelledby="capabilitiesHeading">
        <div class="setup-section-heading">
          <div>
            <span class="eyebrow">How the skill works</span>
            <h2 id="capabilitiesHeading">What the skill covers</h2>
          </div>
        </div>
        <div class="setup-capability-grid">
          <article class="setup-capability setup-capability-governance">
            <span class="setup-capability-code">GOV</span>
            <h3>Governance and identity</h3>
            <p>Enterprise policies, organization boundaries, ownership, audit access, and identity handoffs.</p>
            <ul>
              <li>Enterprise or organization baseline</li>
              <li>EMU, SAML, SCIM, and IdP boundaries</li>
            </ul>
          </article>
          <article class="setup-capability setup-capability-access">
            <span class="setup-capability-code">ACC</span>
            <h3>Teams and repository access</h3>
            <p>Team structure, inherited permissions, outside collaborators, and repository roles.</p>
            <ul>
              <li>Team-first access design</li>
              <li>Effective access checks</li>
            </ul>
          </article>
          <article class="setup-capability setup-capability-platform">
            <span class="setup-capability-code">PLT</span>
            <h3>Repository and Actions platform</h3>
            <p>Repository factories, rulesets, workflow policy, runners, environments, and cloud trust handoffs.</p>
            <ul>
              <li>Standards and protected defaults</li>
              <li>Actions policy and runner model</li>
            </ul>
          </article>
          <article class="setup-capability setup-capability-security">
            <span class="setup-capability-code">SEC</span>
            <h3>Security and Copilot rollout</h3>
            <p>Code security coverage, rollout waves, Copilot seats and controls, licensing, and verification evidence.</p>
            <ul>
              <li>CodeQL and secret protection</li>
              <li>Scoped Copilot rollout</li>
            </ul>
          </article>
        </div>
      </section>
      <section id="examples" aria-labelledby="examplesHeading">
        <div class="setup-section-heading">
          <div>
            <span class="eyebrow">Start with an outcome</span>
            <h2 id="examplesHeading">Prompts to adapt for your enterprise</h2>
          </div>
        </div>
        <div class="setup-prompt-grid">
          <article class="setup-prompt-card">
            <h3>Establish a governance baseline</h3>
            <pre><code>Use the github-enterprise-setup skill in Plan mode for enterprise &lt;enterprise&gt; on &lt;host&gt;. Assess governance, identity, Actions, security, and Copilot. Save a reviewed plan without changing GitHub.</code></pre>
          </article>
          <article class="setup-prompt-card">
            <h3>Align one organization</h3>
            <pre><code>Use the github-enterprise-setup skill to align organization &lt;org&gt; in enterprise &lt;enterprise&gt;. Review teams, repository access, rulesets, and Actions policy. Ask one unresolved decision at a time, then save the plan.</code></pre>
          </article>
          <article class="setup-prompt-card">
            <h3>Roll out GitHub Copilot</h3>
            <pre><code>Use the github-enterprise-setup skill to plan a GitHub Copilot rollout for &lt;enterprise or org&gt;. Check seat management, policy inheritance, agent controls, estimated seat changes, and rollout evidence. Do not make changes.</code></pre>
          </article>
          <article class="setup-prompt-card">
            <h3>Plan a security rollout</h3>
            <pre><code>Use the github-enterprise-setup skill to plan code security for organizations &lt;orgs&gt;. Assess entitlements, CodeQL coverage, secret scanning, push protection, exceptions, and rollout waves. Save a plan without changing GitHub.</code></pre>
          </article>
        </div>
      </section>
      <section id="boundaries" aria-labelledby="boundariesHeading">
        <h2 id="boundariesHeading">Before you start</h2>
        <p>You need GitHub Copilot CLI installed and signed in, GitHub CLI (<code>gh</code>), and <code>jq</code>. Authenticate <code>gh</code> to the intended host with an account that can inspect the selected resources. Changes may require an enterprise or organization owner.</p>
        <p><strong>The enterprise account must already exist.</strong> The skill checks prerequisites for your outcome. It flags work that the available APIs cannot perform or that an owner in your identity provider or another external system must do.</p>
        <p>The skill does not administer GitHub Enterprise Server, deploy Azure infrastructure, or run the curriculum's lab provisioners. Use the <a href="index.html#outcomes">hands-on sessions</a> to learn a control or test the result with your team.</p>
        <span id="review" aria-hidden="true"></span>
        <a class="btn btn-primary" href="github-setup-guide.html">Read the setup guide &rarr;</a>
      </section>
    </div>
  </main>
  <footer class="footer" role="contentinfo">
    <div class="wrap footer-inner">
      <a class="brand" href="index.html" aria-label="RVAS, Agentic DevSecOps"><img src="assets/img/logo-full.png" alt="RVAP" class="rvap-nav-logo" height="32" /></a>
      <p>Agentic DevSecOps.</p>
      <nav class="footer-links" aria-label="Footer"><a href="index.html">Choose a route</a><a href="catalog.html">Hands-on sessions</a><a href="github-setup-guide.html">Setup guide</a></nav>
    </div>
  </footer>
  <script src="assets/js/shell.js"></script>
</body>
</html>