Sema GitHub integration: individual OAuth vs organization GitHub App for least-privilege access and credential renewal
We are evaluating Sema for code review and need to configure GitHub access with least-privilege principles. The platform can connect via a user-level OAuth grant or an organization-managed GitHub App installation scoped to selected repositories. Each model changes who controls revocation, who must re-authenticate when credentials expire, and whether access b
sema
oauth