GitLab

GitLab is a web-based DevOps lifecycle tool that provides a Git repository manager providing wiki, issue-tracking, and continuous integration and deployment pipeline features.

Connecting your GitLab allows OX to map your apps and scan them for security issues.

GitLab server

• gitlab.com - if you are using the public SaaS GitLab server, you can use either an "Identity provider" or "Token" login. The Token option has the address of the SaaS server by default.

• GitLab Enterprise - if you are using a private GitLab installation, use the "Token" login and provide the GitLab server URL on the "Token" login tab.

Connection options

• Identity Provider - just click “Connect” under the “Identity Provider” tab and follow the instructions on the screen.

• Token - Create a token in GitLab with the permissions (scopes) mentioned below, copy the token into the token field and click “Connect.”

Token scopes required

• api

• read_user

• read_registry

Once you have verified GitLab connectivity, you can see all the repositories and select them for scanning.

Setting repositories' scope

You can use the "Gear" icon to choose the repositories' scope OX will cover. Only repositories chosen here will be covered and scanned.

Here you can also decide what will happen by default with newly discovered repositories.