GitHub Enterprise Cloud for Government

GitHub Enterprise Cloud for Government is available through GSA MAS Schedule 70 (IT Professional Services) and SEWP V contracts under SIN 132-51 Software Licenses. Government pricing includes significant discounts compared to commercial rates, typically 20-30% reduction for federal agencies. The authorization boundary encompasses GitHub's SaaS platform including repositories, GitHub Actions runners, and integrated security features, but excludes customer code and configurations which remain customer responsibility. Contracting officers must approve the GitHub Customer Agreement addendum, data processing agreement, and BAA for HIPAA if applicable. The SSP documents a clear delineation between GitHub's platform responsibilities and customer configuration responsibilities. Typical procurement timeline spans 60-90 days including security review, legal approval, and technical configuration. For CMMC assessments, include GitHub Enterprise Cloud Gov within your assessment boundary as an External Service Provider (ESP) at the appropriate CMMC level. Document the shared responsibility model clearly, ensuring GitHub's FedRAMP controls map to your required CMMC practices. Maintain evidence of GitHub's authorization status and implement additional customer-side controls for code scanning, branch protection, and access management to meet CMMC requirements.