Connect a repository

Your GitHub inventory.
A response with context.

Bring a repository’s exact package versions into Wisesama, then keep the assessed revision and response evidence connected.

Connect GitHub Read the setup guide

Provider authorization is separate from signing in. The connection flow shows availability for this deployment.

Connect with the
scope in view.

Choose a personal account or organization, then select the repositories the GitHub App may access.

Provider access
Read-only repository Contents and Metadata for repositories selected in the GitHub App.
What Wisesama processes
Supported inventory files, repository metadata, and allowlisted package-manager and CI configuration at the imported commit. Baseline checks retain extracted facts and paths rather than raw configuration.
Important scope detail
GitHub Contents permission can read all contents of selected repositories. Wisesama’s inventory selection is not a file-level provider permission.
Code changes
This assessment workflow does not push commits, create pull requests, or execute repository code.

From connection to continuing assessment.

  1. Choose a repository and branch

    The picker shows repositories available through your authorized provider connection.

  2. Review the inventory

    Select a supported file and check exact versions, parsing warnings, and repository-wide scope.

  3. Assess the recorded commit

    Inventory metadata is read from an immutable revision, keeping the match traceable.

  4. Manage access and freshness

    Refresh, reconnect, change selection, or disconnect from workspace integrations. Failures retain the last successful evidence.

Recover a missing repository or failed sync

You stay in control of access.

Disconnecting stops future access through the connection. Earlier assessment and response records remain as evidence of the snapshot that was assessed. Remove the provider grant in GitHub as well to revoke access there.

Read about security and data

Make the next security update
relevant to your software.

Start with a repository or a pinned inventory.

Connect a repository See supported inventories