# Connector: GitHub (github)

Purpose: releases, tags, commits and security advisories of public repositories. Retrieval: prefers the unauthenticated Atom feeds (/releases.atom, /tags.atom, /commits/<branch>.atom) which are not subject to the 60 req/h REST limit; the REST API (/repos/{owner}/{repo}/security-advisories, optional GITHUB_TOKEN) only for advisories. Conditional GET honoured. Config: { repo: "owner/name", kind: releases|tags|commits|advisories, branch? }. Normalization: keyed list by entry id / GHSA id; compareFields: title (releases/tags) or state, severity, title (advisories). Events: repository_release, software_release, security_advisory. Verified: 2026-09-08 on 20 repositories (anthropics/*, openai/openai-python, vercel/next.js, kubernetes/kubernetes, python/cpython, hashicorp/terraform, CVEProject/cvelistV5…).