Comment on page
GitLab Source Control & CI/CD
Let's get to know GitLab connector
GitLab is a web-based DevOps lifecycle tool that provides a Git repository manager providing wiki, issue-tracking, and continuous integration and deployment pipeline features.
Connecting your GitLab allows OX to map your apps and scan them for security issues.
- gitlab.com - if you are using the public SaaS GitLab server, you can use either an "Identity provider" or "Token" login. The Token option has the address of the SaaS server by default.
- GitLab Enterprise - if you are using a private GitLab installation, use the "Token" login and provide the GitLab server URL on the "Token" login tab.
- Identity Provider - just click “Connect” under the “Identity Provider” tab and follow the instructions on the screen.
GitLab connector
- Token - Create a token in GitLab with the permissions (scopes) mentioned below, copy the token into the token field and click “Connect”.
.png?alt=media&token=bb20d856-8bc6-4ae3-9cfb-2813e3494bfd)
Token
- api
- read_user
- read_registry
.png?alt=media&token=fa01197e-ddb6-4c58-ae81-8e20732f2261)
Token scopes
Once you have verified GitLab connectivity, you can see all the repositories and select them for scanning.
You can use the "Gear" icon to choose the repositories' scope OX will cover. Only repositories chosen here will be covered and scanned.
Here you can also decide what will happen by default with newly discovered repositories.
Last modified 7mo ago