Code Scanning With a Personal Access Token
⚠️ Disclaimer
For Gitlab Premium & Gitlab Ultimate users we recommend using Gitlab Service Accounts. In case you would use this approach, make sure to setup an integration user that is called AikidoSec.
Introduction
You can use personal access tokens which Aikido uses to perform the code scanning. You can update this token on this page.
Creating a Personal Access Token
Gitlab cloud supports several different personal access tokens, which all work the same way. We usually recommend to create a group PAT, but for Gitlab cloud this is only possible for premium customers.
Navigate to the "Personal Access Token" settings page
For a group access token: Go to you group page > Settings > Access Tokens
For a personal access token: Go to your profile page > User settings > Access Tokens

Group Access Tokens page with no active tokens and an option to add new token.
Click on "Add new token"
Enter a name for the token, remove the expiration date and select the read_api, read_user and read_repository scope

Click on "Create token"
Copy the token and enter it into the input field on the update access token page of Aikido

Last updated
Was this helpful?