Skip to main content
Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

FAQs

FAQs: Frequently Asked Questions about GitHub

What is GitHub?

GitHub is a Git repository hosting service, but it adds many of its own features. While Git is a command-line tool, GitHub provides a Web-based graphical interface. It also provides access control and several collaboration features, such as wikis and basic task management tools for every project, so it's not just a tool for developers. It can be used by product and project managers for better team communication, managing issues, and sharing content.

Can I use GitHub at VA?

Yes. GitHub has been approved (in February 2018) as a VIP-compliant alternative to the Rational toolset. Teams may start using GitHub immediately.

Do I need to be a developer to use GitHub?

No. GitHub is used by developers, project managers, and product managers.

Why are there two versions of Github?

The Department of Veterans Affairs has two instances of GitHub available to their community to advance development best practices - GitHub.com and GitHub Enterprise. The default instance for all VA teams is GitHub.com.

If you feel your project code, documentation, or test results include sensitive information, please use the GitHub Enterprise (GitHub.va) instance.

VistA projects will use the GitHub Enterprise (GitHub.va) instance.

GitHub.com (GitHub Enterprise Cloud)

Github.com is the VA's default source code repository tool. It is hosted by GutHub in their FedRAMP-tailored cloud environment and provides the VA with access to thousands of open source repositories and code. This allows for much more efficient software development and ease of new hire on-boarding. GitHub.com is FedRAMP tailored and has received VA ATO approval. It currently hosts many of the VA's open source and public projects, as well as many of the VA's internal projects source code available to all VA GitHub users, and many private VA projects containing source code only accessible to the teams directly involved in their development.

Access rights to the VA organization on GitHub.com are granted by VA administrators. Internal repositories are configured by default within this instance and are only viewable and accessible to those who are members of the VA organization on GitHub.com. Public repositories within the VA organization are viewable as read-only to the general public.

  • This instance does support early Code Development and Project Management processes with vendors and contractors when conducting on-boarding operations
  • Supports integrations with cloud-hosted services like OMB's Jira, CloudBees hosted Jenkins, and thousands of others available in the GitHub Marketplace
  • Repositories are internally private by default but can be set to private at repository creation or by an organization administrator after creation, and may be made public with approval of an organization owner
  • Supports VA open source obligation
  • Integration with GitHub Enterprise via GitHub Connect
  • Integration for single-sign-on (PIV) is currently being planned
  • For questions regarding GitHub.com, please contact DevOpsTeam@va.gov
GitHub.va (GitHub Enterprise Server)

GitHub.va (GitHub Enterprise Server) is hosted behind the VA firewall. This instance must be use for VistA projects. Information hosted in this instance can only be accessed from inside the VA network with your VA PIV card. Private repositories within this instance are only viewable and accessible to those with the appropriate access to the repository. Public repositories within this instance are viewable with read-only access to anyone within the VA network.

  • This instance uses single-sign-on (PIV)
  • This instance cannot be seen by individuals outside of the VA employee network
  • For questions regarding the GitHub.va instance, please go to the VAEC ticketing portal
How can we manage and track changes to documents and other artifacts in Github?

GitHub's "code" management provides version control for documents and artifacts. Upload documents to the appropriate repository for your product.

Can private or internal repositories owned by the organization be forked in GitHub?

No. Forking private and internal repositories is disabled for all organizations within the VA GitHub enterprise. This control reduces the risk of private VA code leakage outside of the organization.

What do I do if I lose my 2fa Device and recovery codes?

If both access to the 2FA device/app and recovery codes are no longer available you will need to open a support issue to request the release of your email from the account. This will let you recreate the account. You can open the request here: https://support.github.com/contact/account?tags=hubberfy_authentication.

Funding and Finance

Will GitHub need to be paid for by the Projects?
No, VA OIT has an enterprise-wide license for GitHub. Individual project are not responsible for “paying” for GitHub.

Return to Guides