Skip to content

Framework for GitHub Apps on AWS

Build powerful GitHub App bots on AWS — serverless, secure, and scalable.

This framework provides a production-ready foundation for building GitHub App bots that run entirely on AWS serverless infrastructure.

Architecture Decisions

Understand the design choices that shaped this system.

  • Webhook Ingestion — API Gateway + WAF + HMAC signature verification
  • Event Routing — EventBridge custom bus with per-handler idempotency
  • User Authentication — OAuth Device Flow + web redirect, auto-refresh tokens
  • Bot Commands — Extensible command router (help, echo, check, and more)
  • CI Checks — Express Step Functions workflow creating GitHub Check Runs
  • Monitoring — CloudWatch dashboard, custom metrics, DLQ alarm
  • Security — KMS encryption, WAF protection, least-privilege IAM