Manage repositories in Northstar
The repository details drawer in Northstar includes a Configuration tab where you can manage feature settings for individual connected repositories. You can enable or disable features for each repository, disconnect a repository from Northstar, and reconnect it when needed — without modifying configuration files inside your repositories.
Doing this task is necessary for this reason in this context.
Before you begin
To use the configuration tab, you need:
View access to the repository to see the configuration tab
Edit access to the repository to make changes to settings or connection status
If you have view access but not edit access, the configuration tab is visible, but all controls are read-only.
Repository connection status
The repository details drawer shows a visual indicator when a repository is not connected to the SCM. If you see this indicator, Northstar may not receive scan data for that repository until the connection is restored.
A repository can be in one of these states:
Status | What it means |
|---|---|
Connected | The repository is connected to GitHub. Scans run according to your feature settings. |
Not connected | The repository is not connected to the SCM. Northstar may not receive scan data. |
Pending disconnection | A disconnect was initiated, and a pull request was opened on GitHub. The disconnection is complete when the pull request is merged. |
Configure repository features
Control | Type | Default | Description |
|---|---|---|---|
AI Triage | Toggle | On | Turns AI Triage on or off for the repository's scans. |
SmartFix | Toggle | On | Turns SmartFix on or off for the repository's scans. |
SAST | Toggle | On | Enables or disables static analysis (opengrep) for the repository's scans. |
SCA | Toggle | On | Enables or disables static software composition analysis for the repository's scans. |
Disconnect | Button | -- | Disconnects the repository from Contrast. Automatically raises a pull request in GitHub to remove the workflow file. |
Re-connect | Button | -- | Available when a repository is disconnected. Reconnects the repository and opens a pull request in GitHub to add the workflow file. |
To configure repository features:
Open the repository details drawer for the repository you want to configure.
Select the Configuration tab.
Toggle AI Triage, SmartFix, SAST, or SCA on or off as needed.
Changes take effect for the next scan. Toggling a feature off does not affect results from scans that have already run.
Disconnect a repository
Disconnecting a repository removes it from Northstar and raises a pull request in GitHub to remove the workflow file from the repository. The disconnection is not complete until you merge that pull request.
Disconnecting a repository sets all feature toggles (AI Triage, SmartFix, SAST, SCA) to off. The repository enters a Pending disconnection state until the pull request is merged in GitHub.
To disconnect a repository:
Open the repository details drawer and select the Configuration tab.
Select Disconnect.
Review the confirmation dialog, then select Disconnect to confirm.
Follow the instructions in Northstar to complete the disconnection in GitHub. You must merge the pull request and make any required changes to the GitHub app to fully remove the integration. A link to your SCM is provided.
Until the pull request is merged, the repository shows as a Pending disconnection in Northstar.
Reconnect a repository
If a repository is disconnected, you can reconnect it from the Configuration tab. Reconnecting raises a pull request in GitHub to add the workflow file. All feature toggles are reset when a repository is reconnected.
To reconnect a repository:
Open the repository details drawer and select the Configuration tab.
Select Re-connect.
Follow the instructions in Northstar and merge the pull request in GitHub to complete the connection.
All feature toggles (AI Triage, SmartFix, SAST, SCA) are turned on by default when you reconnect a repository. Review your settings after reconnecting.