fix(backend): fall back when GitHub App installation is missing (#1523)

* fix(backend): fall back when GitHub App installation is missing

* chore: update changelog for #1523

Author: brendan-kellam

CHANGELOG.md

@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - Upgraded `seroval` to `^1.5.6`. [#1508](https://github.com/sourcebot-dev/sourcebot/pull/1508)
 - Fixed vulnerability triage for reusable-workflow callers, repositories without CodeQL, and transient non-JSON Linear query responses. [#1515](https://github.com/sourcebot-dev/sourcebot/pull/1515)
+- [EE] Fixed GitHub connection syncs failing when a configured organization does not have the GitHub App installed by falling back to legacy authentication for that organization. [#1523](https://github.com/sourcebot-dev/sourcebot/pull/1523)
 
 ## [5.1.4] - 2026-07-24
 

packages/backend/src/ee/githubAppManager.ts

@@ -106,13 +106,13 @@ export class GithubAppManager {
         this.initialized = true;
     }
 
-    public async getInstallationToken(owner: string, deploymentHostname: string = GITHUB_DEFAULT_DEPLOYMENT_HOSTNAME): Promise<string> {
+    public async getInstallationToken(owner: string, deploymentHostname: string = GITHUB_DEFAULT_DEPLOYMENT_HOSTNAME): Promise<string | undefined> {
         this.assertInitialized();
 
         const key = this.generateMapKey(owner, deploymentHostname);
         const installation = this.installationMap.get(key) as Installation | undefined;
         if (!installation) {
-            throw new Error(`GitHub App Installation not found for ${key}`);
+            return undefined;
         }
 
         const octokitApp = this.octokitApps.get(installation.appId) as App;

packages/backend/src/github.ts

@@ -136,18 +136,20 @@ export const getOctokitWithGithubApp = async (
         throw new Error(`GitHub App authentication is not currently licensed for ${context}.`);
     }
 
-    try {
-        const hostname = url ? new URL(url).hostname : GITHUB_CLOUD_HOSTNAME;
-        const token = await githubAppManager.getInstallationToken(owner, hostname);
-        const { octokit: octokitFromToken } = await createOctokitFromToken({
-            token,
-            url,
-        });
-        return octokitFromToken;
-    } catch (error) {
-        logger.error(`Error getting GitHub App token for ${context}.`, error);
-        throw error;
+    const hostname = url ? new URL(url).hostname : GITHUB_CLOUD_HOSTNAME;
+    const token = await githubAppManager.getInstallationToken(owner, hostname);
+    if (!token) {
+        logger.warn(
+            `No matching GitHub App installation found for ${context} on ${hostname}; falling back to legacy GitHub authentication.`
+        );
+        return octokit;
     }
+
+    const { octokit: octokitFromToken } = await createOctokitFromToken({
+        token,
+        url,
+    });
+    return octokitFromToken;
 }
 
 export const getGitHubReposFromConfig = async (config: GithubConnectionConfig, signal: AbortSignal): Promise<{ repos: OctokitRepository[], warnings: string[] }> => {

packages/backend/src/utils.ts

@@ -150,16 +150,18 @@ export const getAuthCredentialsForRepo = async (repo: RepoWithConnections, logge
             }
 
             const token = await githubAppManager.getInstallationToken(owner, deploymentHostname);
-            return {
-                hostUrl: repo.external_codeHostUrl,
-                token,
-                cloneUrlWithToken: createGitCloneUrlWithToken(
-                    repo.cloneUrl,
-                    {
-                        username: 'x-access-token',
-                        password: token
-                    }
-                ),
+            if (token) {
+                return {
+                    hostUrl: repo.external_codeHostUrl,
+                    token,
+                    cloneUrlWithToken: createGitCloneUrlWithToken(
+                        repo.cloneUrl,
+                        {
+                            username: 'x-access-token',
+                            password: token
+                        }
+                    ),
+                }
             }
         }
     }