Skip to content

Repository selection

Selection decides which repositories remain visible and which ones may proceed to desired-state observation. It is separate from policy comparison.

UML activity diagram showing owner detection, authenticated personal discovery, exclusions, repository and type filters, archives, manage false, and observation

Open the PlantUML source

Discovery rules

  • An organization owner uses organization repository discovery exposed to the credential.
  • A personal owner matching the authenticated user can include private repositories visible through authenticated-user discovery.
  • Another personal owner exposes only repositories GitHub makes public for that user.

Exact exclusions are removed first. --repo and --type then narrow command scope. Type resolution uses repos.<name>.type before organization custom property evidence.

Archived and manage: false repositories can remain visible to inventory or audit, but desired-state mutation is suppressed. Observation then fetches only the detailed settings and structures named by the effective policy.