Salesforce Commerce Cloud GitHub Repositories and Access

Commerce Cloud maintains a GitHub organization to share code and artifacts with Commerce Cloud customers and partners: https://github.com/SalesforceCommerceCloud

The org is the primary place where code is shared for using B2C Commerce and includes public and private repositories.

Public repos are available to anyone that browses GitHub. This includes open source repos like PWA Kit, Commerce API SDK, and the SFCC-CI command-line tool.

Private repos must be accessed by a GitHub user login that has been authenticated with Commerce Cloud. These repos contain code that is licensed, based on your Commerce Cloud license, and covered under your NDA. They are not open-source. This includes closed source repos like Storefront Reference Architecture.

If you access a private repo and are not logged into GitHub with a Commerce Cloud authenticated account, you receive a 404 error from GitHub as if the repository doesn’t exist at all!

To access private repos associate your GitHub account with Commerce Cloud using Account Manager:

  1. If you do not have a GitHub user account, create one from the GitHub Sign Up page.

    Your GitHub account does not need to be related to any Commerce Cloud or Salesforce account you already have. It can be something different.

  2. Enable two-factor authentication (2FA) for your GitHub account.

    To maintain trust, Salesforce requires that anyone accessing the GitHub repositories has 2FA set up for their account. Follow the directions for Configuring Two-Factor Authentication on GitHub, and complete that process.

    This is separate from Commerce Cloud or Salesforce two-factor authentication. You can use whatever mechanism for 2FA you want to for your GitHub account.

  3. With a valid and logged in GitHub user account with 2FA configured, associate that account with Commerce Cloud opening the Salesforce Commerce Cloud Single Sign On page. This allows you to connect your GitHub user account to your Account Manager user account.

With the process complete, your GitHub account is allowed access to Salesforce Commerce Cloud private repositories. You’re asked to authenticate with your Account Manager credentials when you attempt to access private repositories.

GitHub users who have been inactive for 90 days are removed from the org.

Removed users lose access to private forks of the org's private repos.

Users who are removed as a result of this inactivity receive an automated email from GitHub, and can rejoin by authenticating with their Account Manager credentials in the opening the Salesforce Commerce Cloud Single Sign On page.