TABLE OF CONTENTS

Introduction

When integrating a GitHub organization using the Connect via SaaS integration flow, the total number of repositories in GitHub may differ from the number of repositories automatically selected for scanning.


This article explains how automatic repository selection works and how to add repositories that were not automatically selected during the initial integration.


Applicability

This article applies to:

  • Aqua SaaS Edition
  • GitHub integrations using the Connect via SaaS integration flow


Description

During GitHub organization integration, Aqua discovers all repositories that the configured GitHub account has permission to access.


If Select All Repositories is selected during the Connect via SaaS integration process, Aqua does not automatically select every repository in the organization. Instead, Aqua automatically selects only repositories that have had code commits within the last three months.


Repositories without any code commits during the last three months are not automatically selected for scanning. These repositories remain available and can be manually added to the integration at any time. As a result:

  • The total number of repositories in GitHub may be greater than the number of repositories initially selected for scanning.
  • Aqua scans only the repositories that are automatically selected during the integration.
  • Repositories that are not automatically selected remain available to be added later.


This is expected product behavior and is designed to prioritize repositories with recent development activity.


Example

Consider a GitHub organization containing 100 repositories.

  • 45 repositories have received code commits within the last three months.
  • 55 repositories have not had any code commits during that period.

During the Connect via SaaS integration:

  • Even if Select All Repositories is selected, Aqua automatically selects and scans only the 45 repositories that have had code commits within the last three months.
  • The remaining 55 repositories are not automatically selected and remain available to be added manually after the integration is complete.

This behavior is expected and does not indicate that any repositories are missing.



Viewing Repositories Available for Scanning

To view repositories that were not automatically selected during the initial integration:

  1. Navigate to Code Repositories.
  2. Click Add New Repository.
  3. Select the GitHub organization from the Providers drop-down.
  4. Review:
    • The number of repositories currently connected for scanning.
    • The repositories that are available to be added for scanning.



Adding Additional Repositories

To include repositories that were not automatically selected:

  1. Navigate to Code Repositories.
  2. Click Add New Repository.
  3. Select the GitHub organization.
  4. Select the repositories to add.
  5. Click Apply.

The selected repositories will then be added to the integration and scheduled for scanning.



Additional Resources

https://docs.aquasec.com/saas/supply-chain-security/integrations/code-repository-integrations/source-code-management-integrations/

image