An organization requires approval for GitHub App installations. What does this control achieve?
Select an answer to reveal the explanation.
Short Explanation and Infographic
App install approval is change control for third-party (and internal) integrations: owners see permissions before the app gets org data. That stops random 'helpful' browser extensions and SaaS tools from wiring themselves into private repos. It does not ban PATs by itself and certainly does not open-source your code to Marketplace.
Full explanation below image
Full Explanation
The correct answer is that organization owners review and approve GitHub App installations before apps access organization resources. This reduces shadow IT integrations and enforces least privilege on app permissions. Option A confuses App install policy with PAT policy. Option C is false. Option D is false and insecure. Pair installation approval with IP allow lists, allowed app policies where applicable, and periodic access reviews of installed apps and their permission grants.