FAQ - Docs

Getting Started

There are no separate CodeCargo passwords. Everyone signs in through GitHub SSO, so your GitHub identity is your CodeCargo identity — no secondary accounts to manage.

Can I use private or public GitHub repositories?

Yes! CodeCargo works with both public and private GitHub repositories.

Can I use private GitHub Actions?

Yes! CodeCargo works with both public marketplace actions and your private organizational actions.

Access & Permissions

Does CodeCargo respect my GitHub repository permissions?

Yes. CodeCargo enforces your existing GitHub permissions: if you can't access a repository on GitHub, you can't see or trigger its workflows in CodeCargo. Access is re-validated on each operation, so changes to your GitHub permissions take effect right away.

How do people get access to a project?

Anyone with access to a repository linked to a project automatically gains access to that project (shown as a Repo Access source). Admins can also grant explicit CodeCargo roles for finer-grained control. See Access Control for the full role model.

Does CodeCargo sync my GitHub teams?

Yes. Team membership in CodeCargo mirrors your GitHub organization's team structure and updates automatically as your GitHub teams change. See Access Control.

Is there an audit trail of changes?

Yes. The Audit Log records who changed what in your organization, when, and whether the action succeeded, was denied, or errored. You can filter it and export it to your SIEM.

Migration

Which CI/CD platforms can I migrate from?

The Migration Assistant converts Jenkins, Azure DevOps, and GitLab (gitlab.com or self-managed) pipelines to GitHub Actions. You import your pipeline data, map jobs, plugins, and credentials to their GitHub equivalents, then convert jobs in batches with the migration agent or one at a time in the GenAI Editor.

Can CodeCargo move my repositories to GitHub too?

Yes, from Azure DevOps, GitLab (gitlab.com or self-managed), Bitbucket Data Center, and GitHub Enterprise Server, with Gitea coming soon. Migrating Repositories copies them to GitHub through GitHub Enterprise Importer from inside CodeCargo. After an Azure DevOps move, Prepare Rewire finds and fixes references that still point at Azure DevOps.

How is CodeCargo different from GitHub Enterprise Importer and GitHub Actions Importer?

GitHub's importers are command-line tools: one copies repositories, the other converts pipelines with rules and leaves scripted Jenkins pipelines, plugins, and secrets for you to finish by hand. CodeCargo runs the entire migration in one place. It plans waves across every CI system, maps shared libraries, plugins, and credentials, converts pipelines with AI agents, and standardizes them on shared Building Blocks. See Why Enterprises Migrate with CodeCargo.

Workflows & Editing

What are Building Blocks?

Building Blocks are a library of approved templates — your organization's golden paths. A block can be a GitHub Actions reusable workflow, an individual action, or a whole repository (useful for Terraform modules and other templates). Teams import, edit, and attach them to projects for standardized, governed automation.

Can I edit code across multiple repositories at once?

Yes. Add files or entire repositories to a workspace, and the GenAI Editor agent can make coordinated edits across all of them, then open a pull request to each affected repository when you sync. See Workspaces for how edits are saved and synced.

Can I restrict the inputs users choose in a Self-Service Workflow?

Yes. When configuring a Self-Service Workflow input, enable Restrict Choices to turn a free-text field into a dropdown of allowed values, optionally with friendly labels so users see readable names instead of raw values.

How do I view logs for my Self-Service Workflow executions?

Self-Service Workflows ultimately execute a GitHub Actions Reusable Workflow. To view the run logs, navigate to the GitHub repository where the underlying workflow is defined — the logs are stored there.

Why did my workflow run fail?

CodeCargo explains failed and timed-out GitHub Actions runs about a minute after they finish. The explanation names the likely cause and the failing job and step, says whether a re-run is likely to pass, and flags failures that have happened before. Explanations need CodeCargo-managed AI, so organizations that bring their own AI key don't receive them.

AI & Agents

What is Dispatch?

Dispatch is a chat assistant that plans work across CodeCargo — agents, workflows, guardrails, CargoWall, projects, and more — and runs the plan only after you approve it.

What's the difference between Agentic Jobs and Agentic Workflows?

An Agentic Job is a repeatable task that CodeCargo's own agent runs: a prompt, granted tools, a trigger, and a target repository. Agentic Workflows are GitHub's markdown-defined agents (gh-aw), compiled to GitHub Actions workflows. CodeCargo catalogs them and can trigger published ones, but GitHub runs them.

Which agents can CodeCargo run?

The Agent Catalog lists agents from three engines: CodeCargo's own agents, GitHub Agentic Workflows that run on GitHub Actions, and GitHub Copilot custom agents. All three go through the same catalog, review flow, and governance.

Can agents use my MCP servers?

Yes. Org admins register and vet MCP servers in an organization catalog, then grant a server and a chosen subset of its tools to individual Agentic Jobs. The same catalog can be published as an MCP registry for GitHub Copilot.

Can I use my own AI provider keys?

CodeCargo provides and manages AI models and keys by default. Enterprise organizations can bring their own keys instead; your keys take precedence, and CodeCargo's managed keys are the fallback. See AI/LLM Configuration, or talk to us about bringing your own model provider.

Security & Compliance

What about secrets?

Secrets stay in GitHub. CodeCargo never stores your GitHub secrets. Workflows access secrets through GitHub's native secret management.

What's the difference between CargoWall's audit and enforce mode?

CargoWall audit mode monitors and logs all network egress from your workflows without blocking — ideal for rollout and assessment. Enforce mode blocks unauthorized outbound connections in real time. You can validate policies in audit mode first, then switch to enforce.

How is a workflow's compliance score calculated?

Your compliance score is the percentage of applicable rules that pass — (passing ÷ applicable) × 100 — with rules marked Not Applicable excluded. Rules carry a severity from Critical to Low, and when an evaluation touches secrets, actual values are redacted from the feedback.

Visibility & Insights

How does the Service Catalog discover my services?

The Service Catalog analyzes your repositories to detect components, ownership, dependencies, and CI/CD patterns, then assembles them into a graph of services and their relationships — so the map stays current without manual upkeep.

How do I keep my GitHub Actions versions up to date?

Actions Advisor maps every action and reusable workflow across your organization, surfaces unpinned or outdated versions, and can open update pull requests across many repositories at once. Its SLSA journey pins every third-party action in one batch of pull requests. SHA-pinning is the recommended practice because the exact code that runs can't change without a deliberate update.

Operations & Notifications

How do I get notified about important events?

CodeCargo can reach you through the in-app notification bell, Slack, email, and webhooks. You choose which events trigger notifications and where they're delivered, at both the organization and personal level. See Notifications for setting up destinations and subscriptions.

Can I run CodeCargo workloads on my own infrastructure?

Yes, on the Enterprise plan. Self-hosted Cargo Operators run CodeCargo workloads in your own Kubernetes infrastructure, and hybrid and on-premises deployments are available too. SaaS-hosted execution is available on all plans. Talk to us about your environment.

Plans & Costs

How do I control costs?

Workflows run on your existing GitHub Actions runners, so you keep control of compute. For AI, org admins can set monthly spend caps for the organization and for each user, as alerts only or as hard limits. Actions Advisor's Cost Savings journey finds wasted Actions minutes and prices them with your runner rates.

What plans does CodeCargo offer?

CodeCargo offers Starter (free), Team, and Enterprise plans. Plans differ in repository and user limits, AI usage, support, and deployment options. See codecargo.com/pricing for what each plan includes and current limits.