spb/websensor

1# Connector: GitHub (`github`)2**Purpose**: releases, tags, commits and security advisories of public repositories.3**Retrieval**: prefers the unauthenticated Atom feeds (`/releases.atom`, `/tags.atom`, `/commits/<branch>.atom`)4which are not subject to the 60 req/h REST limit; the REST API (`/repos/{owner}/{repo}/security-advisories`,5optional `GITHUB_TOKEN`) only for advisories. Conditional GET honoured.6**Config**: `{ repo: "owner/name", kind: releases|tags|commits|advisories, branch? }`.7**Normalization**: keyed list by entry id / GHSA id; `compareFields: title` (releases/tags) or8`state, severity, title` (advisories). **Events**: `repository_release`, `software_release`, `security_advisory`.9**Verified**: 2026-09-08 on 20 repositories (anthropics/*, openai/openai-python, vercel/next.js,10kubernetes/kubernetes, python/cpython, hashicorp/terraform, CVEProject/cvelistV5…).11