Install the private prpl Defender GitHub App

Outcome

The private prpl Defender GitHub App (prpl-private) is installed on your GitHub account or organization with the repositories you chose, and you can verify and manage the installation from GitHub's settings.

Who can do it

• On GitHub: you must be the App's owning account; for an organization target you also need to be an organization owner (or have a GitHub App manager approve the installation).
• In prpl: this guide is for organization administrators — the mapped owner of the GitHub namespace being protected.

Before you begin

• Know which repositories you want covered. You can start with Only select repositories and add more later.
• Installing the App does not by itself let prpl clone your code today — clone access is granted separately in Connect GitHub authentication. Do both.
• After you finish on GitHub, your browser returns to prpl's installation confirmation page, which shows the account and the repositories the App can see once GitHub's notification arrives (usually within seconds). The onboarding guide's install step also ticks itself once the installation is recorded.

Steps

1. Open the installation page: github.com/apps/prpl-private/installations/new.
2. Choose where to install: your personal account or one of your organizations.

3. Under Repository access, choose All repositories or (recommended) Only select repositories, then pick the repositories prpl should cover.

4. Review the permission list GitHub displays for the App, then select Install.
5. Operators only: the App's own configuration (permissions, webhook, credentials) lives at github.com/settings/apps/prpl-private under the owning account.

Verify

1. On GitHub, open the target account's Settings → Applications → Installed GitHub Apps (for an organization: Organization settings → GitHub Apps).
2. Confirm prpl-private is listed, and select Configure to see exactly which repositories it covers.

Troubleshooting

• The install URL shows 404 Not Found. This is the private-App restriction, not an outage: only the account that owns prpl-private can install it. Recovery: contact prpl support or your site administrator and tell them which account or organization needs the installation.
• You can open the page but not choose your organization. You are not an owner of that organization on GitHub. Ask an organization owner to complete the installation, or to grant your installation request when GitHub prompts them.
• A repository you need is missing from the selection list. Repository selection only lists repositories in the account you chose. Switch the target account at the top of the install flow, or add the repository later via Configure on the installation.
• The App was suspended or uninstalled. See Manage the private GitHub App installation for suspension, uninstall, and recovery paths.

Next step

Connect GitHub authentication — the App installation and clone authorization are separate grants; prpl needs the second one to analyze code. Related: Manage the private GitHub App installation and Invite members with initial repository access.