How do I connect my GitHub account?
The preferred way is our Zinn® GitHub App, which you install on your account and grant to selected repositories. It uses granular permissions and short-lived installation tokens — there is no long-lived secret to leak — and you can revoke it in one click. If you would rather use a fine-grained personal access token, we tell you exactly which scopes to grant and validate the token the moment you enter it.
What do you validate about my token?
On entry we call the GitHub API to confirm the token is live and carries the required permissions — repository contents, Pages, and administration for repo creation — and show a green or red check before anything is saved. We never store an unvalidated or over-scoped key. Credentials go to Vault through the same connection seam as every other account you bring.
What do you actually do on my account?
We create repositories (or use an existing one), push your content or build output, enable GitHub Pages from a branch and directory or the GitHub Actions build, and can roll back. For a custom domain we write the repo CNAME, enforce HTTPS, and configure the DNS for you. We can also back the repository up to R2 object storage on a schedule.
Can I use my own domain on a Pages site?
Yes. We write the repository CNAME file, turn on Enforce HTTPS, and configure the DNS — the apex A-records to GitHub's Pages addresses and the www CNAME — following the same apex-and-www rule as every other backend.
Is GitHub Pages safe to use on my PBN?
Use it with your eyes open. GitHub Pages has no server-side rules, so the SEO-crawler blocking can only fall back to robots.txt and meta tags there — it cannot hard-block Ahrefs or Majestic the way our own fleet can — and every Pages site shares GitHub's infrastructure and IP ranges, which is a shared footprint. So on the Footprint-Free line we offer GitHub Pages but flag it as footprint-weaker, keep the PBN default on our fleet or Cloudflare, and warn you when you pick it for a footprint-sensitive site. On the Mainstream line it is a first-class, free static option.