GitLab

GitLab is a complete DevOps platform that provides source code management, CI/CD pipelines, security testing, package registries, and collaboration capabilities in a single application.

Connecting GitLab to OX enables OX to discover repositories, analyze source code, scan open source dependencies, monitor security posture, and correlate findings across your software development lifecycle.

What OX adds

• Context and correlation: OX maps GitLab findings to applications, services, and teams to show impact and ownership.

• Prioritization with severity factors: OX may reprioritize scanner severities when exploitability and environment context reduce risk (for example, Critical → High). Severity factors explain why the priority changed.

• Evidence at a glance: When available, OX displays scanner evidence, file locations, merge request information, and remediation guidance alongside OX analytics to speed triage.

Terminology mapping

GitLab and OX use different labels for similar concepts. Use this quick map while you work.

GitLab	OX Security
Projects	Applications
Merge Requests	Pull Requests
CI/CD Pipelines	CI/CD Pipelines
Container Registry	Container Registry
Vulnerabilities	Issues
Security Findings	Findings
Members	Users

Connection methods

For general information about connection methods, see the article Connection methods.

There are two options to connect GitLab to OX.

Connection Method	Details
Identity Provider	Use your existing identity provider connection for centralized authentication and repository access management.
Personal Access Token	Use a GitLab Personal Access Token (PAT) with the required scopes to authenticate and import repositories.

Prerequisites

Prerequisites for all connection methods

Prerequisite	Description
OX permissions	Permission to configure connectors
GitLab access	Access to the GitLab projects and groups you want to connect