django-github-app

A Django toolkit providing the batteries needed to build GitHub Apps - from webhook handling to API integration.

Built on gidgethub and httpx, django-github-app handles the boilerplate of GitHub App development. Features include webhook event routing and storage, API client with automatic authentication, and models for managing GitHub App installations, repositories, and webhook event history.

Fully supports both sync (WSGI) and async (ASGI) Django applications.

Requirements

Python 3.10, 3.11, 3.12, 3.13
Django 4.2, 5.0, 5.1

Installation

Install the package from PyPI.

python -m pip install django-github-app

# or if you like the new hotness

uv add django-github-app
uv sync

Add the app to INSTALLED_APPS in your Django project's DJANGO_SETTINGS_MODULE.
```
INSTALLED_APPS = [
    "django_github_app",
]
```

Run the migrate management command to add django-github-app's models to your database.

python manage.py migrate

# or for those living on the bleeding edge

uv run manage.py migrate

Add django-github-app's webhook view to your Django project's urls.

For Django projects running on ASGI, use django_github_app.views.AsyncWebhookView:

from django.urls import path

from django_github_app.views import AsyncWebhookView

urlpatterns = [
    path("gh/", AsyncWebhookView.as_view()),
]

For traditional Django projects running on WSGI, use django_github_app.views.SyncWebhookView:

from django.urls import path

from django_github_app.views import SyncWebhookView

urlpatterns = [
    path("gh/", SyncWebhookView.as_view()),
]

Important

Make sure your GITHUB_APP["WEBHOOK_TYPE"] setting matches your view choice:

Use "async" with AsyncWebhookView
Use "sync" with SyncWebhookView

Setup your GitHub App, either by registering a new one or importing an existing one, and configure django-github-app using your GitHub App's information.

You will need the following information from your GitHub App:
- App ID
- Client ID
- Name
- Private Key (either the file object or the contents)
- Webhook Secret
- Webhook URL
All examples below use environs to load the values from an .env file. Adjust the code to your preferred way of loading Django settings.

Note

All examples will use the private key contents loaded directly from environment. To use a key file instead:

import environs

env = environs.Env()
env.read_env()

GITHUB_APP = {
    "PRIVATE_KEY": env.path("GITHUB_PRIVATE_KEY_PATH"),
}

django-github-app will automatically detect if GITHUB_APP["PRIVATE_KEY"] is a path and load the file contents. For more information, see the PRIVATE_KEY section in the Configuration documentation below.

Create a New GitHub App

Register a new GitHub App, following these instructions from the GitHub Docs. For a more detailed tutorial, there is also this page -- in particular the section on Setup.

For the Private Key, you will be able to use either the file contents or the file itself to authenticate with GitHub, as described in the note above.

For the Webhook URL, use the endpoint you configured in step 4 (e.g., <your project's base url>/gh/).

Configure your Django settings by adding the following dictionary to your DJANGO_SETTINGS_MODULE, filling in the values from the previous step.

import environs

env = environs.Env()
env.read_env()

GITHUB_APP = {
    "APP_ID": env.int("GITHUB_APP_ID"),
    "CLIENT_ID": env.str("GITHUB_CLIENT_ID"),
    "NAME": env.str("GITHUB_NAME"),
    "PRIVATE_KEY": env.str("GITHUB_PRIVATE_KEY"),
    "WEBHOOK_SECRET": env.str("GITHUB_WEBHOOK_SECRET"),
    "WEBHOOK_TYPE": "async",  # Use "async" for ASGI projects or "sync" for WSGI projects
}

Install the GitHub App on your account.
- Go to your GitHub App's settings
- Click "Install App"
- Select the account to install it on
- Choose which repositories to give it access to
When you install the app, django-github-app will automatically create the necessary Installation and Repository models when it receives the installation.created webhook event.

Use an Existing GitHub App and Installation

Collect your existing app and installation's information.
- All GitHub App information and credentials listed above in step 5 of Installation
  - Make sure the Webhook URL matches the endpoint configured in step 4 of Installation
- Account type where installed (org or user)
- Account name (username or organization name)
- Installation ID (e.g. https://github.com/settings/installations/<ID> for an user installation)

Configure your Django settings by adding the following dictionary to your DJANGO_SETTINGS_MODULE, filling in the values from your existing GitHub App.

import environs

env = environs.Env()
env.read_env()

GITHUB_APP = {
    "APP_ID": env.int("GITHUB_APP_ID"),
    "CLIENT_ID": env.str("GITHUB_CLIENT_ID"),
    "NAME": env.str("GITHUB_NAME"),
    "PRIVATE_KEY": env.str("GITHUB_PRIVATE_KEY"),
    "WEBHOOK_SECRET": env.str("GITHUB_WEBHOOK_SECRET"),
    "WEBHOOK_TYPE": "async",  # Use "async" for ASGI projects or "sync" for WSGI projects
}

Import your existing GitHub App by using the github import-app management command.

python manage.py github import-app --type user --name <username> --installation-id 123456

# or for you thrill seekers and early adopters

uv run manage.py github import-app --type user --name <username> --installation-id 123456

Getting Started

django-github-app provides a router-based system for handling GitHub webhook events, built on top of gidgethub. The router matches incoming webhooks to your handler functions based on the event type and optional action.

To start handling GitHub webhooks, create your event handlers in a new file (e.g., events.py) within your Django app.

For ASGI projects using django_github_app.views.AsyncWebhookView:

# your_app/events.py
from django_github_app.routing import GitHubRouter

gh = GitHubRouter()

# Handle any issue event
@gh.event("issues")
async def handle_issue(event, gh, *args, **kwargs):
    issue = event.data["issue"]
    labels = []

    # Add labels based on issue title
    title = issue["title"].lower()
    if "bug" in title:
        labels.append("bug")
    if "feature" in title:
        labels.append("enhancement")

    if labels:
        await gh.post(issue["labels_url"], data=labels)


# Handle specific issue actions
@gh.event("issues", action="opened")
async def welcome_new_issue(event, gh, *args, **kwargs):
    """Post a comment when a new issue is opened"""
    url = event.data["issue"]["comments_url"]
    await gh.post(
        url, data={"body": "Thanks for opening an issue! We'll take a look soon."}
    )

For WSGI projects using django_github_app.views.SyncWebhookView:

# your_app/events.py
from django_github_app.routing import GitHubRouter

gh = GitHubRouter()

# Handle any issue event
@gh.event("issues")
def handle_issue(event, gh, *args, **kwargs):
    issue = event.data["issue"]
    labels = []

    # Add labels based on issue title
    title = issue["title"].lower()
    if "bug" in title:
        labels.append("bug")
    if "feature" in title:
        labels.append("enhancement")

    if labels:
        gh.post(issue["labels_url"], data=labels)


# Handle specific issue actions
@gh.event("issues", action="opened")
def welcome_new_issue(event, gh, *args, **kwargs):
    """Post a comment when a new issue is opened"""
    url = event.data["issue"]["comments_url"]
    gh.post(url, data={"body": "Thanks for opening an issue! We'll take a look soon."})

Important

Choose either async or sync handlers based on your webhook view - async handlers for AsyncWebhookView, sync handlers for SyncWebhookView. Mixing async and sync handlers is not supported.

In these examples, we automatically label issues based on their title and post a welcome comment on newly opened issues. The router ensures each webhook is directed to the appropriate handler based on the event type and action.

Each handler receives two arguments:

event: A gidgethub.sansio.Event containing the webhook payload
gh: A GitHub API client for making API calls (AsyncGitHubAPI for async handlers, SyncGitHubAPI for sync handlers)

To activate your webhook handlers, import them in your app's AppConfig.ready() method, similar to how Django signals are registered.

# your_app/apps.py
from django.apps import AppConfig


class YourAppConfig(AppConfig):
    default_auto_field = "django.db.models.BigAutoField"
    name = "your_app"

    def ready(self):
        from . import events  # noqa: F401

For more information about GitHub webhook events and payloads, see these pages in the GitHub docs:

For more details about how gidgethub.sansio.Event and webhook routing work, see the gidgethub documentation.

Features

GitHub API Client

The library provides AsyncGitHubAPI and SyncGitHubAPI, implementations of gidgethub's abstract GitHubAPI class that handle authentication and use httpx as their HTTP client. While they're automatically provided in webhook handlers, you can also use them directly in your code.

The clients automatically handle authentication and token refresh when an installation ID is provided. The installation ID is GitHub's identifier for where your app is installed, which you can get from the installation_id field on the Installation model.

`AsyncGitHubAPI`

For Django projects running with ASGI or in async views, the async client provides the most efficient way to interact with GitHub's API. It's particularly useful when making multiple API calls or in webhook handlers that need to respond quickly.

from django_github_app.github import AsyncGitHubAPI
from django_github_app.models import Installation

# Access public endpoints without authentication
async def get_public_repo():
    async with AsyncGitHubAPI() as gh:
        return await gh.getitem("/repos/django/django")


# Interact as the GitHub App installation
async def create_comment(repo_full_name: str):
    # Get the installation for the repository
    installation = await Installation.objects.aget(
        repositories__full_name=repo_full_name
    )

    async with AsyncGitHubAPI(installation_id=installation.installation_id) as gh:
        await gh.post(
            f"/repos/{repo_full_name}/issues/1/comments", data={"body": "Hello!"}
        )

    # You can either provide the `installation_id` as above, or the `Installation` instance
    # itself
    async with AsyncGitHubAPI(installation=installation) as gh:
        await gh.post(
            f"/repos/{repo_full_name}/issues/1/comments", data={"body": "World!"}
        )

`SyncGitHubAPI`

For traditional Django applications running under WSGI, the sync client provides a straightforward way to interact with GitHub's API without dealing with async/await.

from django_github_app.github import SyncGitHubAPI
from django_github_app.models import Installation

# Access public endpoints without authentication
def get_public_repo_sync():
    with SyncGitHubAPI() as gh:
        return gh.getitem("/repos/django/django")


# Interact as the GitHub App installation
def create_comment_sync(repo_full_name: str):
    # Get the installation for the repository
    installation = Installation.objects.get(repositories__full_name=repo_full_name)

    with SyncGitHubAPI(installation_id=installation.installation_id) as gh:
        gh.post(f"/repos/{repo_full_name}/issues/1/comments", data={"body": "Hello!"})

    # You can either provide the `installation_id` as above, or the `Installation` instance
    # itself
    with SyncGitHubAPI(installation=installation) as gh:
        gh.post(f"/repos/{repo_full_name}/issues/1/comments", data={"body": "World!"})

Models

django-github-app provides models that handle the persistence and retrieval of GitHub App data. These models abstract away common patterns when working with GitHub Apps: storing webhook events, managing installation authentication, and tracking repository access.

All models and their managers provide async methods for database operations and GitHub API interactions, with sync wrappers where appropriate.

`EventLog`

django_github_app.models.EventLog maintains a history of incoming webhook events, storing both the event type and its full payload.

It also has support for automatically cleaning up old events based on your configuration, via the acleanup_events manager method and the GITHUB_APP["DAYS_TO_KEEP_EVENTS"] setting. For more details, see the sections on AUTO_CLEANUP_EVENTS and DAYS_TO_KEEP_EVENTS in the Configuration documentation below.

The model primarily serves the webhook handling system, but you can also use it to query past events if needed.

Manager methods

acreate_from_event/create_from_event: Store incoming webhook events (primarily for internal use)
acleanup_events/cleanup_events: Remove events older than specified days

Properties

action: Extract action from event payload, if present

`Installation`

django_github_app.models.Installation represents where your GitHub App is installed. It stores the installation ID and metadata from GitHub, and provides methods for authentication.

from django_github_app.github import AsyncGitHubAPI
from django_github_app.models import Installation

# Get an installation and its access token
installation = await Installation.objects.aget(repositories__full_name="owner/repo")
async with AsyncGitHubAPI(installation_id=installation.installation_id) as gh:
    # Authenticated as this installation
    await gh.post("/repos/owner/repo/issues", data={"title": "Hello!"})

Manager methods

acreate_from_event/create_from_event: Create from installation events (primarily for internal use)
acreate_from_gh_data/create_from_gh_data: Create from GitHub API response data (primarily for internal use)
aget_from_event/get_from_event: Retrieve installation from webhook events (gidgethub.sansio.Event)

Model methods

get_gh_client: Get configured API client for this installation
aget_access_token/get_access_token: Generate GitHub access token for API calls
arefresh_from_gh/refresh_from_gh: Update an installation's data from GitHub
aget_repos/get_repos: Fetch installation's accessible repositories

`Repository`

django_github_app.models.Repository tracks repositories where your app is installed and provides high-level methods for GitHub operations.

from django_github_app.models import Repository

# Get open issues for a repository
repo = await Repository.objects.aget(full_name="owner/repo")
issues = await repo.aget_issues(params={"state": "open"})

Manager methods

acreate_from_gh_data/create_from_gh_data: Create from GitHub API response data (primarily for internal use)
aget_from_event/get_from_event: Retrieve repository from webhook events (gidgethub.sansio.Event)

Model methods

get_gh_client: Get configured API client for this repository
aget_issues/get_issues: Fetch repository's issues

Properties

owner: Repository owner from full name
repo: Repository name from full name

Built-in Event Handlers

The library includes event handlers for managing GitHub App installations and repositories. These handlers automatically update your Installation and Repository models in response to GitHub webhooks:

Installation events:
- installation.created: Creates new Installation record
- installation.deleted: Removes Installation record
- installation.suspend/installation.unsuspend: Updates Installation status
- installation.new_permissions_accepted: Updates Installation data
- installation_repositories: Creates and/or removes the Repository models associated with Installation
Repository events:
- repository.renamed: Updates repository details

The library loads either async or sync versions of these handlers based on your GITHUB_APP["WEBHOOK_TYPE"] setting.

System Checks

The library includes Django system checks to validate your webhook configuration:

`django_github_app.E001`

Error raised when both AsyncWebhookView and SyncWebhookView are detected in your URL configuration. You must use either async or sync webhooks consistently throughout your project, not both.

To fix this error, ensure all your webhook views are of the same type:

Use AsyncWebhookView for all webhook endpoints in ASGI projects
Use SyncWebhookView for all webhook endpoints in WSGI projects

Configuration

Configuration of django-github-app is done through a GITHUB_APP dictionary in your Django project's DJANGO_SETTINGS_MODULE.

Here is an example configuration with the default values shown:

GITHUB_APP = {
    "APP_ID": "",
    "AUTO_CLEANUP_EVENTS": True,
    "CLIENT_ID": "",
    "DAYS_TO_KEEP_EVENTS": 7,
    "NAME": "",
    "PRIVATE_KEY": "",
    "WEBHOOK_SECRET": "",
    "WEBHOOK_TYPE": "async",
}

The following settings are required:

APP_ID
CLIENT_ID
NAME
PRIVATE_KEY
WEBHOOK_SECRET
WEBHOOK_TYPE

`APP_ID`

🔴 Required | str

The GitHub App's unique identifier. Obtained when registering your GitHub App.

`AUTO_CLEANUP_EVENTS`

Optional | bool | Default: True

Boolean flag to enable automatic cleanup of old webhook events. If enabled, EventLog instances older than DAYS_TO_KEEP_EVENTS (default: 7 days) are deleted during webhook processing.

Set to False to either retain events indefinitely or manage cleanup separately using EventLog.objects.acleanup_events with a task runner like Django-Q2 or Celery.

`CLIENT_ID`

🔴 Required | str

The GitHub App's client ID. Obtained when registering your GitHub App.

`DAYS_TO_KEEP_EVENTS`

Optional | int | Default: 7

Number of days to retain webhook events before cleanup. Used by both automatic cleanup (when AUTO_CLEANUP_EVENTS is True) and the EventLog.objects.acleanup_events manager method.

`NAME`

🔴 Required | str

The GitHub App's name as registered on GitHub.

`PRIVATE_KEY`

🔴 Required | str

The GitHub App's private key for authentication. Can be provided as either:

Raw key contents (e.g., from an environment variable)
Path to key file (as a str or Path object)

The library will automatically detect and read the key file if a path is provided.

from pathlib import Path

from environs import Env

env = Env()

# Key contents from environment
GITHUB_APP = {
    "PRIVATE_KEY": env.str("GITHUB_PRIVATE_KEY"),
}

# Path to local key file (as string)
GITHUB_APP = {
    "PRIVATE_KEY": "/path/to/private-key.pem",
}

# Path to local key file (as Path object)
GITHUB_APP = {
    "PRIVATE_KEY": Path("path/to/private-key.pem"),
}

# Path from environment
GITHUB_APP = {
    "PRIVATE_KEY": env.path("GITHUB_PRIVATE_KEY_PATH"),
}

Note

The private key should be kept secure and never committed to version control. Using environment variables or secure file storage is recommended.

`WEBHOOK_SECRET`

🔴 Required | str

Secret used to verify webhook payloads from GitHub.

`WEBHOOK_TYPE`

🔴 Required | Literal["async", "sync"] | Default: "async"

Determines whether the library uses async or sync handlers for processing webhook events:

"async": Use with AsyncWebhookView in ASGI projects
"sync": Use with SyncWebhookView in WSGI projects

Development

For detailed instructions on setting up a development environment and contributing to this project, see CONTRIBUTING.md.

For release procedures, see RELEASING.md.

License

django-github-app is licensed under the MIT license. See the LICENSE file for more information.

Name		Name	Last commit message	Last commit date
Latest commit History 74 Commits
.bin		.bin
.github		.github
.just		.just
src/django_github_app		src/django_github_app
tests		tests
.editorconfig		.editorconfig
.env.example		.env.example
.gitignore		.gitignore
.pre-commit-config.yaml		.pre-commit-config.yaml
AUTHORS.md		AUTHORS.md
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
Justfile		Justfile
LICENSE		LICENSE
README.md		README.md
RELEASING.md		RELEASING.md
noxfile.py		noxfile.py
pyproject.toml		pyproject.toml
uv.lock		uv.lock

License

joshuadavidthomas/django-github-app

Folders and files

Latest commit

History

Repository files navigation

django-github-app

Requirements

Installation

Create a New GitHub App

Use an Existing GitHub App and Installation

Getting Started

Features

GitHub API Client

AsyncGitHubAPI

SyncGitHubAPI

Models

EventLog

Manager methods

Properties

Installation

Manager methods

Model methods

Repository

Manager methods

Model methods

Properties

Built-in Event Handlers

System Checks

django_github_app.E001

Configuration

APP_ID

AUTO_CLEANUP_EVENTS

CLIENT_ID

DAYS_TO_KEEP_EVENTS

NAME

PRIVATE_KEY

WEBHOOK_SECRET

WEBHOOK_TYPE

Development

License

About

Resources

License

Stars

Watchers

Forks

Releases 6

Contributors 3

Languages

`AsyncGitHubAPI`

`SyncGitHubAPI`

`EventLog`

`Installation`

`Repository`

`django_github_app.E001`

`APP_ID`

`AUTO_CLEANUP_EVENTS`

`CLIENT_ID`

`DAYS_TO_KEEP_EVENTS`

`NAME`

`PRIVATE_KEY`

`WEBHOOK_SECRET`

`WEBHOOK_TYPE`