Security & Compliance
Lynx Compliance - Northstar Connector
Pulls compliance evidence from Patrii Northstar - repository inventory, branch protection, signed-commit ratio, PR-review coverage, CODEOWNERS, secret-scanning alerts, CI workflows - over the Northstar API. Dogfood batch 1.
lynx_compliance_connector_northstar
· v19.0.1.0.0
· Premium
What this solves
Lynx Compliance - Northstar Connector
Compliance evidence pulled from Patrii Northstar - the source-control platform - so a customer running Northstar internally gets immediate auditor-grade evidence on source-code-management controls.
Source-code management is a top-of-list audit interview. Auditors ask: "who can push to main", "are commits signed", "is code reviewed before merge", "are secrets ever committed". This connector answers each mechanically. Authentication is a per-instance Northstar access token stored on the connector record; the default endpoint pre-fills from ir.config_parameter northstar_endpoint when the lynx_northstar_connector module is installed (so customers configure once across the platform).
Key Features
Northstar connector type - configure with the instance URL + a personal access token (read-only scopes are enough).
Ten resource pulls - repositories, branch protection rules, CODEOWNERS files, signed-commit percentages, code-review coverage, secret-scanning alerts, CI workflows, webhooks, org admin members, signed releases.
Pre-seeded collectors - five evidence collectors covering software inventory (ID.AM-02), change management (PR.PS-02), code-signing (PR.PS-01), privileged-user inventory (PR.AA-05), and CI configuration (A.8.9).
Reuses ``northstar.config`` - if lynx_northstar_connector is installed, the URL and admin token pre-fill from its existing configuration so admins set up Northstar once across the whole platform; the per-record fields are an override path, not a duplicate store.
Open-source forge support - the underlying API is the Forgejo / Gitea API, so any compatible self-hosted instance works as a drop-in alternative source.
Integrates With
lynx_compliance_connectors - registers under the connector framework.
lynx_compliance_evidence_collectors - shipped collectors use the standard schedule.
lynx_northstar_connector (optional, soft) - reuses the configured Northstar endpoint.
Northstar via the requests HTTP client.
Try Lynx Compliance - Northstar Connector on your team.
Free trial, no credit card. Talk to sales when you're ready.