Overview #
The Repositories page is your home base in Norma. It lists every repository connected to the current workspace, shows the status of the latest scan for each, and is where you trigger new scans.
Getting there #
Click Repositories in the left sidebar. It’s the first item — and the page you land on after signing in.
What you see #
Every repository is rendered as a card. Each card corresponds to a (repository, branch) — a repository scanned on more than one branch shows up as one card per branch, sharing the same repository URL. Each card shows:
- The repository name and provider icon (GitHub or Bitbucket).
- The stack badge — the tech stack Norma auto-detected (e.g.,
Angular TypeScript Web Application,Python FastAPI Web API). - The branch being scanned, shown as a monospace pill so sibling cards for the same repository are easy to tell apart.
- The last scan result — a green SUCCESS chip or red FAILED chip with the timestamp.
- A Run Scan button.
You can switch between Cards view (visual, more detail per repo) and List view (denser, more repos on screen) using the toggle in the top right.
See Scanning multiple branches for how sibling cards, per-branch scan history, and quotas work when a repository is scanned on more than one branch.
Filtering and search #
Above the cards you’ll see:
- Filter chips —
All,GitHub,Bitbucket, plus status filtersLast scan: SuccessandLast scan: Failed. Click a chip to filter the list. - Search box — type to filter by repository name as you type.
Card states #
The Run Scan button changes based on what’s happening with each repository:
| State | Button shows | What it means |
|---|---|---|
| Never scanned | Review Stack & Scan | Your first scan hasn’t run yet. Click to trigger it. |
| Auto-discovery running | Discovering… (disabled, spinner) | Norma is figuring out your tech stack. Wait ~30 seconds. |
| Scan running | Scanning… (disabled, spinner) | A scan is in progress. You can navigate away — it continues in the background. |
| Idle | Run Scan | Click to re-scan with the latest code on your branch. |
When a scan finishes while you’re elsewhere in the app, a toast notification appears: “Scan completed for [repo-name] — N issues found”, with a link to the repo’s Overview page.
Adding a repository or branch #
Click Import in the top right of the page. The same flow handles both first-time repository imports and adding another branch of a repository you’ve already connected. You’ll be walked through:
- Choose a provider — see Connect GitHub or Connect Bitbucket. Only needed the first time you connect a given provider.
- Pick the repository from the Connected Repositories picker. Repositories you’ve already imported are grouped at the top with a purple accent bar and small chips showing which branches are already scanned; new repositories appear below with an empty circle.
- Confirm name and branch. If you’re adding another branch, already-scanned branches are disabled in the dropdown so you can’t accidentally re-add one.
- Import & Analyze (first-time) or Add Branch & Analyze (subsequent branches) — Norma starts the auto-discovery and scan automatically.
The Import button is always available as long as you have at least one connected provider — you can add branches even when you’re at your repository quota. If you’re at the repository quota and try to import a new repository (not a branch of one you already have), that row shows a lock icon and clicking it opens the upgrade drawer. See Scanning multiple branches and Tiers and quotas.
Drilling into a repository #
Click any card to open that repository’s detail view. Inside, you’ll see tabs for:
- Overview — your Production Ready Score and the score breakdown across the six areas.
- Issues — every issue from the latest scan, with severity, impact area, file, line, and recommended fix.
- Coverage — which scanners and rules ran, and what was excluded.
See Reading results for what to look at first.
Removing a repository or branch #
Because each card is one (repository, branch) entry, removal is per branch:
- Remove one branch of a repository — click the trash icon on the card for the branch you want to drop, then confirm. Only that branch’s scan history and score are deleted. Other branches of the same repository are untouched, and the repository is not removed from your quota (other branches still exist).
- Remove the last branch of a repository — same trash icon on the last remaining card. The repository disappears from the Repositories page entirely and 1 repository slot is freed on your quota.
- From inside a repository — open it, click the kebab menu in the top right, and choose Remove from workspace. Same rules: removes only the branch you’re viewing; removing the last branch removes the repository from your quota.
Removal deletes the Norma-side record (scan history, score history) but does not touch the code on your provider. You can re-add a repository (or a branch of it) later — it’ll be treated as a fresh import.
Related #
- Scanning multiple branches — how sibling-branch cards, adding branches, and per-branch quotas work.
- Connect GitHub — full provider walkthrough.
- Connect Bitbucket — full provider walkthrough.
- Repository providers — what permissions Norma requests and how to revoke access.
- Tiers and quotas — how many repos you can connect per workspace.
