Aikido
Collect production repository scanning and vulnerability-workflow evidence from Aikido.
Configure access
Create a dedicated OAuth client with repositories:read and issues:read. Enter its client ID and secret in Sparta.
Set the production repository IDs and the maximum acceptable scan age. Match the repository list to your audit scope rather than relying on an account-wide inventory.
Collect evidence
Run the connection check and collection. Inspect repository scan freshness, vulnerability remediation, secret findings and recorded exceptions.
Aikido can be selected as an alternative source for supported GitHub scanning checks. Record the source-selection explanation and collect a fresh run after enabling it.
Interpret the result
A repository appearing in Aikido's inventory does not prove that every required scanner is configured. Review scanner coverage separately where the result requests it.
Sparta reads existing scan results. It does not start scans or remediate findings.