AW-013

Type: Connector disposition

Subject: GitHub (Slack app)

Decision requested: Approve the proposed disposition for GitHub (Slack app) across its 3 assessed actions

Inherent / residual: High / Moderate

Control owner: Slack Workspace Admin + GitHub Organization Owner

Context: 3 assessed actions. No Claude runtime control on this path. Administrative actions proposed: Permit with restrictions x3. Class: Slack workspace application (third-party data path - no Claude involvement). Control point: Slack app approval (Slack admin) + source system configuration + vendor contract. Control owner: Slack Workspace Admin + GitHub Organization Owner.

Risks: R-27 [Critical inherent / High residual] Aggregate outbound surface across the estate | R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate | R-34 [High inherent / High residual] Source code, diffs and inadvertently committed secrets rendered into Slack | R-38 [Critical inherent / Critical residual] Slack holds no business associate agreement with any Marketplace application provider

Open verification: V-20 [High] Secret-scanning coverage, whether alerting itself posts secrets into channels, and unfurl behaviour for private repositories.

Ruling:

Amendment or condition: