Connect GitHub
Connect an organization, check the capture status, and review the GitHub evidence available to your workspace.
Sorena connects through its GitHub App. Your workspace needs the Platform feature, and you need to be a workspace admin or owner to connect an organization or open its integration details. You may also need a GitHub organization owner to approve the installation.
Connect an organization
- Check the selected workspace, then open Workspace > Integrations.
- Choose Set up GitHub or Add organization.
- On GitHub, choose the organization and the repository access you want the app to have. GitHub may require approval from an organization owner.
- Return to Sorena and select the destination workspace if asked, then complete the connection.
Only workspaces where you are an admin or owner are available during workspace selection. Check the workspace name before completing the connection.
Review the connection
Open the connected organization from Integrations and check the overview's connection health and capture time before drawing conclusions from the evidence.
| Section | What to review |
|---|---|
| Security | Available security posture and areas needing attention |
| Compliance | Available compliance evidence |
| Governance | Change-management evidence, policy files, and custom properties |
| People & access | Captured members and teams |
| Automation | Available runner and webhook information |
| Activity | Captured activity and webhook deliveries |
| Repositories | Repositories visible to the connected app |
Evidence is read-only in Sorena. Use Manage on GitHub to change the installation's repository access or other GitHub-owned settings. After a change, return to Sorena and choose Sync data when available.
Sync queued means Sorena accepted a background sync request. It keeps the last confirmed evidence visible while checking for completion. Sync completed confirms that sync finished; Sync needs attention means the latest sync did not complete.
Captured evidence can be older than the current state in GitHub. Partial or permission-limited evidence also differs from a confirmed result with no matching rows. Check the status in the section you are reviewing and follow connection troubleshooting if it cannot capture the evidence you need.
Find the right organization
The integration can contain several connected accounts. Use the organization list's search, filters, and pagination before opening a connection. Check the account name, connection status, and repository access on its detail page. All repositories and Selected repositories describe the scope granted to the app.
If access is paused, use Manage on GitHub to review the installation there. A disabled historical connection no longer syncs; return to Integrations to connect again. If the list cannot load, retry it before starting another installation.