Skip to main content

Takumi: Takumi byGMO App, a GitHub App Dedicated to Takumi

· 3 min read
Yoshiaki Matsutomo
Yoshiaki Matsutomo
Software Engineer @ GMO Flatt Security Inc.

The Takumi byGMO App is now available as a Read GitHub App dedicated to Takumi.

Background​

Until now, Takumi has used the Shisho Cloud App, which it shares with CSPM and WASPM, as its Read GitHub App. The Shisho Cloud App has the permissions needed by the features of CSPM and WASPM in addition to Takumi.

We now offer a new GitHub App dedicated to Takumi, so that customers who use only Takumi can integrate with their GitHub organization using just the permissions assessments need.

What's Changed​

The Takumi byGMO App requests the following permissions. All of them are read-only permissions on repositories.

PermissionAccess
ContentsRead-only
Dependabot alertsRead-only
IssuesRead-only
MetadataRead-only
Pull requestsRead-only

Note that the Write GitHub App, used for creating autofix pull requests and similar operations, is unchanged.

You can keep using the Shisho Cloud App, so switching to the Takumi byGMO App is not required.

Getting Started​

Integrating for the First Time​

  1. In the Shisho Cloud console, go to Settings > Service Integrations. If your organization uses CSPM or WASPM, then select the Takumi Integrations tab.
  2. Click Settings on the GitHub card to open the GitHub integration dialog.
  3. Click Setup a new GitHub Organization, then click Install a GitHub App to integrate.
  4. On GitHub, choose the GitHub organization and repositories to integrate, and install the Takumi byGMO App.

Switching from the Shisho Cloud App​

  1. In the Shisho Cloud console, go to Settings > Service Integrations. If your organization uses CSPM or WASPM, then select the Takumi Integrations tab.
  2. Click Settings on the GitHub card to open the GitHub integration dialog.
  3. On the Shisho Cloud App integration of the GitHub organization you want to switch, click Connect Takumi byGMO App with these settings.
  4. On the GitHub installation page, check the selected GitHub organization and repositories, and install the Takumi byGMO App.

This completes the switch.

Integrating the Takumi byGMO App does not delete the Shisho Cloud App integration automatically. Having both apps integrated with the same GitHub organization causes no problem, and Takumi reads repository data with the Takumi byGMO App first. However, after confirming that Takumi works with the Takumi byGMO App, we recommend deleting the Shisho Cloud App integration. However, if you use the Shisho Cloud App for CSPM or WASPM, keep its integration.

▼ User Guide: Integrate GitHub