Connect GitHub

Connect Oplane to your GitHub repositories to enable automated threat modeling on pull requests. The setup takes just a few minutes.

Step 1: Open Workspaces

Navigate to Workspaces in the left sidebar and click the + Workspace button in the top right corner.

Step 2: Create a Managed Workspace

Select Managed Workspace and under Git Repository, click Continue with Github to connect your account.

Step 3: Sign in to GitHub

You'll be redirected to GitHub to sign in. Enter your credentials or use one of the alternative sign-in methods (passkey, Google, Apple).

Step 4: Install the Oplane GitHub App

GitHub will prompt you to install the Oplane Bot on your account or organisation. Choose which repositories Oplane should have access to, review the permissions, and click Install.

Step 5: Select a Repository

Back in Oplane, select your organisation from the dropdown and search for the repository you want to connect.

Step 6: Configure the Workspace

Once connected, configure your workspace settings:

• Analyse Pull Requests — Enable to automatically threat model every PR. If disabled, you can still trigger reviews by mentioning @oplane in a PR comment.
• Access — Add team members who should have access to this workspace.

Click Create when ready.

Step 7: Choose Threat Models

Oplane analyses your repository and suggests threat models based on the codebase. Select the ones relevant to your project, or describe your own scope. This step helps Oplane understand what to focus on in future PR reviews.