Repository as evidence repository
Link a GitHub repository directly to a governance requirement. Commits, pull requests, and releases become available as an evidence source.
Integration · GitHub
GitHub integration for EU AI Act compliance: repositories, issues, and releases as governance evidence
Technical evidence originates where development happens. With SimpleAct's GitHub integration, repositories, issues, and releases link directly to governance requirements and evidence entries — with no context switch for your engineering team.
app.simpleact.de · Available in the product
Integrations
connectedSimpleAct
Risk assessment: HIGH
HIGH→auto
GitHub
Ticket created
synced Jira ServiceNow Teams Webhooks
SimpleAct connects governance requirements to your GitHub repositories. Technical documentation, code reviews, and releases become auditable evidence.
What the integration does
From repository activity to governance evidence
Instead of manually collecting technical evidence, link GitHub repositories directly to the requirements they support.
Issues as governance artifacts
GitHub issues can be linked to open requirements or audit playbook items — technical implementation and compliance requirement stay visibly connected.
Releases document change
Releases in the configured repository flag model or system changes that may be relevant for reassessment triggers and change management.
Workflow
How to link a repository to governance
From connection to auditable evidence — in three steps.
01
1. Link repository
Enter the owner/organization and repository name in SimpleAct settings. A single access token is enough to connect.
02
2. Assign evidence source
Assign the repository to one or more governance requirements — e.g. technical documentation or risk management evidence.
03
3. Evidence in the audit trail
Linked commits, issues, and releases appear in the evidence register and are ready for exports and regulatory evidence.
What teams can do with the GitHub integration
The integration is built for compliance evidence — not generic repository mirroring.
Mark a repository as an evidence repository
Link issues to governance requirements
Document releases as change evidence
Owner/organization-wide configuration
Set a default branch for evidence
Full audit trail for regulatory evidence
Enterprise feature, configurable per tenant
No write access to your code required
Frequently asked questions about the GitHub integration
Does SimpleAct get write access to our repository?
No, read access is enough for the evidence link. SimpleAct reads commits, issues, and releases but never changes any code.
Does the integration work with private repositories?
Yes. With an appropriately scoped access token, private repositories can be linked too.
Can we link multiple repositories?
Yes, multiple repositories can be set as an evidence source per governance requirement or AI system.
Technical evidence straight from GitHub
With SimpleAct's GitHub integration, repositories, issues, and releases become auditable governance evidence — with no extra effort for your engineering team.
Related topics