Connect a GitHub repository
Choose repository access, import an inventory, and keep its assessment current.
Before you connect
Sign in to Wisesama, then start a project. Connecting GitHub is a separate authorization from your Wisesama account. You need permission to install or request the Wisesama GitHub App for the repository owner. Organization approval may be required.
Choose the repositories to share
The GitHub App requests read access to repository contents and metadata. Contents permission covers the selected repositories, even though Wisesama processes supported inventory files and allowlisted package-manager and CI configuration for baseline checks. It is not a file-only permission. Choose only the repositories you intend to assess.
- Choose GitHub in the new-project flow and authorize the connection.
- Install or configure the App for the correct personal account or organization.
- Return to Wisesama and choose a repository you can access.
- Choose its branch and supported inventory path. Review the parsed packages and scope before importing.
Review the imported revision
Wisesama reads inventory metadata from a specific commit. Check the assessed revision and the last successful inventory sync separately from the advisory assessment time. A successful repository sync does not mean a deployment has changed.
If a repository is missing, check the App’s selected repositories and your own GitHub access. Reconnect after access changes. If the provider connection is unavailable, you can still import a supported inventory manually.
Change or remove access
Manage the connection in workspace integrations. Disconnect stops future access through that connection; existing assessment records remain as evidence of the earlier snapshot. Revoke or uninstall the App in GitHub as well if you want to remove the provider grant.