FAQ - Docs

Getting Started

There are no separate CodeCargo passwords. Everyone signs in through GitHub SSO, so your GitHub identity is your CodeCargo identity — no secondary accounts to manage.

Can I use private or public GitHub repositories?

Yes! CodeCargo works with both public and private GitHub repositories.

Can I use private GitHub Actions?

Yes! CodeCargo works with both public marketplace actions and your private organizational actions.

Access & Permissions

Does CodeCargo respect my GitHub repository permissions?

Yes. CodeCargo enforces your existing GitHub permissions: if you can't access a repository on GitHub, you can't see or trigger its workflows in CodeCargo. Access is re-validated on each operation, so changes to your GitHub permissions take effect right away.

How do people get access to a project?

Anyone with access to a repository linked to a project automatically gains access to that project (shown as a Repo Access source). Admins can also grant explicit CodeCargo roles for finer-grained control. See Access Control for the full role model.

Does CodeCargo sync my GitHub teams?

Yes. Team membership in CodeCargo mirrors your GitHub organization's team structure and updates automatically as your GitHub teams change. See Access Control.

Workflows & Editing

What are Building Blocks?

Building Blocks are a library of approved, reusable workflow templates — GitHub Actions Reusable Workflows — that your teams can import, edit, and attach to projects for standardized, governed automation.

Can I edit code across multiple repositories at once?

Yes. Add files or entire repositories to a workspace, and the GenAI Editor agent can make coordinated edits across all of them, then open a pull request to each affected repository when you sync. See Workspaces for how edits are saved and synced.

Can I restrict the inputs users choose in a Self-Service Workflow?

Yes. When configuring a Self-Service Workflow input, enable Restrict Choices to turn a free-text field into a dropdown of allowed values, optionally with friendly labels so users see readable names instead of raw values.

How do I view logs for my Self-Service Workflow executions?

Self-Service Workflows ultimately execute a GitHub Actions Reusable Workflow. To view the run logs, navigate to the GitHub repository where the underlying workflow is defined — the logs are stored there.

Can I migrate from Jenkins or Azure DevOps?

Yes! The Migration Assistant (Preview) supports Jenkins and Azure DevOps as sources, and our AI assistant can help convert those pipelines to GitHub Actions format.

Security & Compliance

What about secrets?

Secrets stay in GitHub. CodeCargo never stores your GitHub secrets. Workflows access secrets through GitHub's native secret management.

What's the difference between CargoWall's audit and enforce mode?

CargoWall audit mode monitors and logs all network egress from your workflows without blocking — ideal for rollout and assessment. Enforce mode blocks unauthorized outbound connections in real time. You can validate policies in audit mode first, then switch to enforce.

How is a workflow's compliance score calculated?

Your compliance score is the percentage of applicable rules that pass — (passing ÷ applicable) × 100 — with rules marked Not Applicable excluded. Rules carry a severity from Critical to Low, and when an evaluation touches secrets, actual values are redacted from the feedback.

Visibility & Insights

How does the Service Catalog discover my services?

The Service Catalog analyzes your repositories to detect components, ownership, dependencies, and CI/CD patterns, then assembles them into a graph of services and their relationships — so the map stays current without manual upkeep.

How do I keep my GitHub Actions versions up to date?

Actions Insights maps every action and reusable workflow across your organization, surfaces unpinned or outdated versions, and can open update pull requests across many repositories at once. SHA-pinning is the recommended practice because the exact code that runs can't change without a deliberate update.

Operations & Notifications

How do I get notified about important events?

CodeCargo can reach you through the in-app notification bell, Slack, email, and webhooks. You choose which events trigger notifications and where they're delivered, at both the organization and personal level. See Notifications for setting up destinations and subscriptions.

Can I run CodeCargo workloads on my own infrastructure?

Yes, on the Enterprise plan. Self-hosted Cargo Operators run CodeCargo workloads in your own Kubernetes infrastructure. SaaS-hosted execution is available on all plans.

Plans & Limits

How do I control costs?

CodeCargo runs workflows on your existing GitHub Actions runners. You maintain full control over compute resources and costs.

What plans does CodeCargo offer?

CodeCargo offers three plans: Starter (free), Team, and Enterprise. All plans include core features like multi-repo AI coding agents, project organization, and CargoWall audit mode. Team and Enterprise plans add advanced capabilities such as custom compliance rules, enforce mode in CargoWall, and the AI-powered Service Catalog. See codecargo.com/pricing for a full comparison.

What are the repository and user limits?

Repository and user limits depend on your plan. The Starter plan supports up to 10 repositories and 20 users. Team plans support up to 250 repositories and 100 users. Enterprise plans offer custom limits. These numbers are subject to change; see codecargo.com/pricing for the latest details.