Code Scanning With a Personal Access Token

⚠️ Disclaimer

For Gitlab Premium & Gitlab Ultimate users we recommend using Gitlab Service Accounts. In case you would use this approach, make sure to setup an integration user that is called AikidoSec.

Introduction

You can use personal access tokens which Aikido uses to perform the code scanning. You can update this token on this page.

Creating a Personal Access Token

Gitlab cloud supports several different personal access tokens, which all work the same way. We usually recommend to create a group PAT, but for Gitlab cloud this is only possible for premium customers.

1. Navigate to the "Personal Access Token" settings page

   1. For a group access token: Go to you group page > Settings > Access Tokens

   2. For a personal access token: Go to your profile page > User settings > Access Tokens

      

      Group Access Tokens page with no active tokens and an option to add new token.
2. Click on "Add new token"

3. Enter a name for the token, remove the expiration date and select the read_api, read_user and read_repository scope

   
4. Click on "Create token"

5. Copy the token and enter it into the input field on the update access token page of Aikido