# Selecting repositories and running change-evidence scans

- Source: https://support.icompaas.com/support/solutions/articles/onb_vcs_evidence-selecting-repositories-and-running-change-evidence-scans
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Getting Started With iCompaas](https://support.icompaas.com/support/solutions/62000037934) › [VCS Onboarding](https://support.icompaas.com/support/solutions/folders/version-control-onboarding)
- Last updated: 2026-07-15
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

Change evidence · applies to GitHub, GitLab and Bitbucket connections

### Where this happens

Once a VCS provider is connected (see [GitHub](https://support.icompaas.com/support/solutions/articles/a_gen_ss_62000037934_ada34272f3-connecting-github-to-icompaas), [GitLab](https://support.icompaas.com/support/solutions/articles/onb_vcs_gitlab-connecting-gitlab-to-icompaas) or [Bitbucket](https://support.icompaas.com/support/solutions/articles/onb_vcs_bitbucket-connecting-bitbucket-to-icompaas)), the **Change Evidence** page (_Compliance Management → Change Evidence_, or _View repositories_ from VCS onboarding) is where you select repositories and run compliance scans.

### Select repositories

1.  If the list is empty, go back to _VCS onboarding_ and click **Sync** to fetch your repository list.
2.  Choose an organization to view its repositories — each shows a repository count and how many are selected.
3.  Tick the repositories to include in evidence collection (or use _Select all_), then click **Save selection**.

### Run a scan

1.  Click **Run scan**. You'll see _"Evidence scan started"_ and the report status shows _In progress_.
2.  When the report is ready, the status flips to _Complete_ and the compliance report lists every scanned repository with per-control **pass / fail / unknown** results.

### What the scan evaluates

Repository change-management posture is checked against the frameworks on your plan — ISO 27001, SOC 2, HIPAA, NIST 800-53, NIST 800-171, BSI C5, GDPR, ISO 27701 and ISO 42001 — producing the change-management evidence (how code review, branch protection and release discipline operate) that auditors sample.

### Troubleshooting

-   **"No repositories synced yet"** — run _Sync_ from VCS onboarding first.
-   **Report stuck on _Generating…_** — large selections take a few minutes; check back shortly.
-   **Save selection disabled** — there are no changes to save since the last selection.