Manage repositories
Use the repository details drawer to manage individual connected repositories, control license usage, and maintain a cleaner repository inventory. You can turn features on or off, archive a repository to pause data processing, and restore it later.
Before you begin
To manage a repository, you need:
View access to the repository to see the Configurations tab
Edit access to the repository to change settings or connection status, or to archive or restore the repository
If you have view access but not edit access, the Configurations tab is visible, but all controls are read-only, and the archive and restore buttons are not available.
Open repository details
In the left navigation, select Explorer > Contrast Graph.
Find the repository. Repository nodes show a code-brackets icon
.You can enter the repository name in the search bar or use the Repository status filter to show both active and archived repository nodes, or only archived repository nodes.
Select the repository node. The Repository details page opens with an Overview tab and a Configurations tab.
The Overview tab shows the repository URL, when Contrast last saw it, and its connection status.
The Configurations tab provides a way to enable or disable repository tools including AI Triage, Static Application Security Testing (SAST), SmartFix, and Software Composition Analysis (SCA). Additionally, you can archive or restore the repository.
Repository connection status
The repository details drawer shows a visual indicator when a repository is not connected to the SCM. If you see this indicator, Northstar may not receive scan data for that repository until the connection is restored.
A repository can be in one of these states:
Status | What it means |
|---|---|
Connected | The repository is connected to GitHub. Scans run according to your feature settings. |
Not connected | The repository is not connected to the SCM. Northstar may not receive scan data. |
Pending disconnection | A disconnect was initiated, and a pull request was opened on GitHub. The disconnection is complete when the pull request is merged. |
Archiving a repository does not change its connection status. An archived repository that is still connected to GitHub continues to show as Connected.
Configure repository features
Control | Type | Default | Description |
|---|---|---|---|
AI Triage | Toggle | On | Turns AI Triage on or off for the repository's scans. |
SmartFix | Toggle | On | Turns SmartFix on or off for the repository's scans. |
SAST | Toggle | On | Enables or disables static analysis (opengrep) for the repository's scans. |
SCA | Toggle | On | Enables or disables static software composition analysis for the repository's scans. |
To configure repository features:
Open the repository details drawer for the repository you want to configure.
Select the Configurations tab.
Toggle AI Triage, SmartFix, SAST, or SCA on or off as needed to enable or disable the features.
Changes take effect for the next scan. Disabling a feature does not affect results from scans that have already run.
Archive a repository
Archive a repository to remove it from your default Explorer views and stop Contrast from processing new data for it. Archiving keeps all historical data, and you can restore the repository at any time.
When you archive a repository:
It no longer appears in Explorer unless you include archived repositories in the Repository status filter.
Contrast stops processing new data for it.
Historical data remains available.
Its feature settings and connection status don’t change.
It no longer counts toward your organization’s repository limit.
To archive a repository:
Open the repository details for the repository you want to archive.
Select Archive repository.
In the confirmation dialog, select Archive repository.
The repository details show an archived banner and the Restore repository button. If the request fails, Northstar shows an error message and the repository stays in its previous state.
Restore an archived repository
Restore an archived repository to return it to your default views and resume processing new data.
To restore a repository:
Open the repository details for the repository you want to restore.
Select Restore repository.
In the confirmation dialog, select Restore repository.
The repository returns to your default views and resumes processing new data. Contrast records each archive and restore action in the audit log, including the repository, the action, the user who performed it, and the time.
Note
If your organization has reached its repository limit, Contrast can’t restore the repository and shows a message explaining why. Archive another repository to free up capacity, then try again.