Block repository administrators from installing GitHub Apps on their own now generally available
Source: GitHub Changelog
New setting for GitHub Apps installation control
Organization owners can now better control which users are allowed to install GitHub Apps across their repositories with a new setting.
Previously, any user with admin permissions on a repository—including outside collaborators—could install GitHub Apps that requested only repository‑level permissions. This could cause unexpected app installations and governance challenges, particularly for organizations with strict security or compliance requirements.
When the new setting is enabled, only organization owners can install GitHub Apps on organization repositories. Repository admins must request an app installation from an organization owner.
How this benefits you
- Strengthen governance by ensuring only trusted users can install GitHub Apps across repositories.
- Reduce the risk of unauthorized or unexpected app installations.
- Help meet compliance requirements.
How to enable the setting
- Navigate to your organization’s Settings.
- Click the Member privileges tab.
- Locate the new option under GitHub Apps and enable it.
How to give feedback
If you have any questions or feedback, feel free to leave a comment in our Community discussion.