Compliance Glossary for Confluence

How do I trace GitHub code to requirements?

No. Production version 6 does not provide end-to-end GitHub-code-to-requirement tracing. Git Connector performs report-only terminology checks and never calls the separate evidence mapper. That mapper can create an immutable code revision and candidate implements link. However, no resolver or visible control approves that candidate. The workspace also does not request traversal from a selected code node.

Last verified against production v6 · 26 September 2026

At a glance

InputCurrent actionOutputBoundary
Approved GitHub repositoryConfigure Repository, Confluence space, and Allowed pathsReport-only terminology scan scopeThe connector does not create code evidence or requirement links.
Connector scanSelect Scan by requestRecent asynchronous jobs and Git terminology findingsAdd as draft creates a glossary draft, not a trace link.
Immutable commit SHA and bounded source filesCall the separate backend mapperGitHub artifact, revision, code subjects, content hashes, and provenanceProduction connector resolvers do not call the mapper.
Declared code-to-requirement relationshipNormalize an implements link from code to requirementCandidate trace linkCandidates are review-only and excluded from governed traversal.
Candidate linkChange its approval state through governanceApproved evidence linkProduction version 6 has no approval resolver or visible approval control.
Approved or imported code and requirement nodesExpand indexed graph neighbors from the code nodeCode-to-requirement path under Forward impactThe current client never sends a selected startNodeId.
Missing endpoint or truncated graphReview Coverage blockersExplicit incomplete-coverage reasonPartial paths are not complete trace coverage.

How it works

  1. Open Git Connector as an administrator.
  2. Set Repository, Confluence space, and Allowed paths.
  3. Select Save connection.
  4. Select Scan by request for a report-only terminology check.
  5. Review Recent asynchronous jobs and Git terminology findings.
  6. Do not treat Add as draft as trace-link approval.
  7. Do not claim code-to-requirement trace evidence from this workflow.

Example

A payment service contains authorizePayment at a fixed commit. The backend mapper can record its revision, hash, path, and an implements candidate. The connector never calls this mapper. No current control approves the candidate or starts workspace traversal from that code node.

What this does not mean

Production version 6 deploys a report-only GitHub connector. The separate mapper and indexed graph services are implemented and tested. They are not joined into one user workflow. End-to-end availability requires mapper invocation, candidate persistence, an approval control, and selected-node graph requests. Only approved or imported links qualify as governed evidence.

Related questions

Next step

Use Git Connector for terminology checks. Do not present its results as governed code-to-requirement trace evidence.

View on Atlassian Marketplace
Verification basis: production v6 code, tests, manifest, and operations guidance. Verified 26 September 2026.