Connect GitHub
Connect an organization, check the capture status, and review the GitHub evidence available to your workspace.
Sorena AI connects through its GitHub App. Your workspace needs the Platform feature, and you need to be a workspace admin or owner to connect an organization or open its integration details. You may also need a GitHub organization owner to approve the installation.
For workspace single sign-on, OpenAI processing preferences, or BYOAI (Bring Your Own AI), use Integrations. Those settings have their own access and license requirements.
Connect an organization
- Check the selected workspace, then open Workspace > Integrations.
- Choose Set up GitHub or Add organization.
- On GitHub, choose the organization and the repository access you want the app to have. GitHub may require approval from an organization owner.
- Return to Sorena and select the destination workspace if asked, then complete the connection.
Only workspaces where you are an admin or owner are available during workspace selection. Check the workspace name before completing the connection.
Review the connection
Open the connected organization from Integrations and check the overview's connection health and capture time before drawing conclusions from the evidence.
| Section | What to review |
|---|---|
| Security | Available security posture and areas needing attention |
| Compliance | Available compliance evidence |
| Governance | Change-management evidence, policy files, and custom properties |
| People & access | Captured members and teams |
| Automation | Available runner and webhook information |
| Activity | Captured activity and webhook deliveries |
| Repositories | Repositories visible to the connected app |
Evidence is read-only in Sorena. Use Manage on GitHub to change the installation's repository access or other GitHub-owned settings. After a change, return to Sorena and choose Sync data when available.
The destination workspace determines who can manage this connection in Sorena. A GitHub organization role does not grant Sorena workspace access, and a Sorena project role does not grant integration-management access. Review roles and access when a colleague cannot open the connection.
Sync queued means Sorena accepted a background sync request. It keeps the last confirmed evidence visible while checking for completion. Sync completed confirms that sync finished; Sync needs attention means the latest sync did not complete.
Captured evidence can be older than the current state in GitHub. Partial or permission-limited evidence also differs from a confirmed result with no matching rows. Check the status in the section you are reviewing and follow connection troubleshooting if it cannot capture the evidence you need.
Find the right organization
The integration can contain several connected accounts. Use the organization list's search, filters, and pagination before opening a connection. Check the account name, connection status, and repository access on its detail page. All repositories and Selected repositories describe the scope granted to the app.
If access is paused, use Manage on GitHub to review the installation there. A disabled historical connection no longer syncs; return to Integrations to connect again. If the list cannot load, retry it before starting another installation.
Related help
- GitHub connection permissions
- Review GitHub evidence
- Sync GitHub data
- Troubleshoot a GitHub connection
- Disconnect GitHub
Screenshots show a demo workspace.