# GitLab Container Registry

Integrate GitLab with OX to centralize security findings alongside container, pipeline, cloud, and runtime signals already in OX.

OX scans GitLab on a schedule and on demand, enriches findings with OX context (application mapping, workflows, and compliance), and presents a unified queue for investigation and reporting.

After you connect, GitLab scan results appear in the Active issues page (use the filter **Source tool > GitLab**).

## What OX adds

* **Context and correlation:** OX maps findings to applications, services, and teams to show impact and ownership.
* **Prioritization with severity factors:** OX may reprioritize scanner severities when exploitability and environment context reduce risk (for example, Critical → High). Severity factors explain why the priority changed.
* **Evidence at a glance:** When available, OX displays scanner evidence, file locations, and remediation guidance alongside OX analytics to speed triage.

## Connection Methods

For general information about connection methods, see[ Connection methods](/get-started/onboarding-to-ox/source-control/connection-methods.md).

Connect to OX with a GitLab token.

## Prerequisites

**OX**

OX permission to configure connectors

**GitLab**

* Admin permissions to the GitLab account you want to connect.

## Connect with username and token

### Step 1: Create personal access token \[GitLab]

1. Verify that the [prerequisites ](#prerequisites)are in place.
2. Log in to your GitLab account.
3. From the **Profile** icon, select **Edit Profile**.
4. From the left menu pane, select **Personal access tokens**.
5. In **Personal access tokens**, select **Add new token**.
6. On the next screen enter:
   * Token name
   * Expiration date
7. In **Scopes**, select:
   * read\_user
   * Read\_registry
   * Read\_api<br>

     <figure><img src="/files/3ZuP1J7VvltY1nG59aku" alt=""><figcaption></figcaption></figure>
8. Scroll down and select **Generate token**.
9. From the next screen, copy the token and save it securely. You won’t see it again after this step.\
   **Best practice:** Store credentials in a secrets manager and set a reminder to rotate them according to your policy.

### Step 2: Connect OX to GitLab \[OX]

1. Verify that the [prerequisites ](#prerequisites)are in place.
2. In OX, go to **Connectors > Registry** and select **GitLab Container Registry**.<br>

   <div align="left"><figure><img src="/files/Re0k9fF9WnmXeU0z2Jos" alt="" width="434"><figcaption></figcaption></figure></div>
3. Enter the following parameters.

<table><thead><tr><th valign="top">Parameter</th><th valign="top">Details</th></tr></thead><tbody><tr><td valign="top">GitLab Container Registry Host URL</td><td valign="top">URL for GitLab cloud or on-premise</td></tr><tr><td valign="top">Token</td><td valign="top">GitLab token</td></tr></tbody></table>

4. Select **CONNECT**. OX validates the credentials.
5. In **Configure your GitLab credentials**, select **VERIFY CONNECTIVITY**.\
   A green checkmark indicates a successful connection. If verification fails, check your credentials and permissions.

**Optional configurations**

* To change the images OX scans and monitors, see the section [Change the locations OX scans](#change-the-locations-ox-scans).
* To connect more GitLab accounts to the same organization in the OX platform, repeat the process.
* For information on the OX Broker, see the article [OX Broker](/get-started/onboarding-to-ox/prerequisites-and-access/ox-broker.md).

## Change the locations OX scans

Once you have a connection, you can change the locations that OX scans and monitors.

1. Use the **Gear** icon at the bottom of the Configuration screen.
2. The locations or objects OX scans and monitors display.
3. Change the selection as needed.
4. Select **SAVE**.

<div align="left"><figure><img src="/files/jffnn3K9mCPbTgdiiHHu" alt="" width="375"><figcaption></figcaption></figure></div>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ox.security/ox-integrations/3rd-party-integrations/registry/gitlab-container-registry.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.