GitHub policies and review requirements

Open Workspace > Integrations, select a connected GitHub account, then choose Governance. You need workspace Admin or Owner access and the Platform feature. Choose Change management, Policy files, or Custom properties before filtering.

Each panel shows captured evidence. To change a GitHub policy, file, or property, make the change on GitHub and sync the connection. Check the capture status before relying on the result.

Review governance and Copilot summariesCopy Anchor Link

The summary shows repositories scanned and skipped, review requirements, policy files present, and external webhook hosts. A skipped repository or an unknown review requirement needs follow-up before you treat the summary as complete.

AI governance shows captured GitHub Copilot settings: public code suggestions, seat assignment, plan, and availability in the code editor, command line, and GitHub.com chat. Compare assigned seats with active users, pending invitations, and users inactive this cycle. A seat is an assigned Copilot license. An unknown setting means that Sorena has not captured that value. Manage these settings on GitHub.

Review change managementCopy Anchor Link

1. Choose Change management and use Search change-management evidence to find repositories.
2. Use Review requirement to show Reviews required, Reviews not required, or Any review policy.
3. Check Permission capture state. Permissions pending identifies evidence where permission capture is incomplete; Permissions complete narrows to the other rows. This filter describes evidence collection, not a request to grant repository access.
4. Use Sort evidence to order by Repository, Capture time, Unreviewed merges, or Approvals required. Choose an ascending or descending Sort order and review other result pages.

Read the Reviews count alongside Unreviewed merges, deployment successes and failures, and Delivery controls. Delivery controls show captured environment protection and workflows. Check any quality note beside the merge count before interpreting it. Unavailable means Sorena cannot show a confirmed value for that detail.

Choose Clear filters to restore the default list. A review requirement in the capture does not show whether every past change followed that requirement; review the captured merge evidence separately.

Check policy filesCopy Anchor Link

Choose Policy files, then use Search policy-file evidence to find repositories. Policy-file kind offers Security policy, License, CODEOWNERS, Dependabot, Workflows, and Contributing guidance. CODEOWNERS names the people or teams responsible for reviewing particular files; Dependabot supports dependency updates and alerts.

Use Policy-file presence to choose Present, Not found, or Any presence. Review the file kind, path, and Last modified value in each row. Present confirms that the capture found the file; assess its contents separately before deciding whether the policy meets your needs.

Sort by Repository, File kind, or Presence, select the order, and check other result pages. Clear filters removes the search and criteria and restores default ordering. If a file is not found, check both the repository on GitHub and the capture's access and freshness.

Check custom propertiesCopy Anchor Link

Custom properties are labels and values your GitHub organization uses to describe repositories or organization-level information.

1. Choose Custom properties and search by property name in Search custom properties.
2. Use Property scope to select Organization, Repository, or All scopes.
3. Sort by Property name, Scope, or Repository, choose the order, and review other result pages.
4. Read the property value with its scope and repository. Not set and Empty value describe different captured results; All repositories provides the context for organization-level rows.

Use Clear filters to return to the broader property list. If a panel fails to load, use its retry action. If Sorena reports partial, permission-limited, or stale evidence, review connection access and capture time before concluding that a control or property is absent.

Screenshots show a demo workspace.