# Connector: GitHub (`github`)
**Purpose**: releases, tags, commits and security advisories of public repositories.
**Retrieval**: prefers the unauthenticated Atom feeds (`/releases.atom`, `/tags.atom`, `/commits/<branch>.atom`)
which are not subject to the 60 req/h REST limit; the REST API (`/repos/{owner}/{repo}/security-advisories`,
optional `GITHUB_TOKEN`) only for advisories. Conditional GET honoured.
**Config**: `{ repo: "owner/name", kind: releases|tags|commits|advisories, branch? }`.
**Normalization**: keyed list by entry id / GHSA id; `compareFields: title` (releases/tags) or
`state, severity, title` (advisories). **Events**: `repository_release`, `software_release`, `security_advisory`.
**Verified**: 2026-09-08 on 20 repositories (anthropics/*, openai/openai-python, vercel/next.js,
kubernetes/kubernetes, python/cpython, hashicorp/terraform, CVEProject/cvelistV5…).