Code Scanning with a Service Account Access Token

⚠️ Disclaimer

This guide is only available for Gitlab Premium & Gitlab Ultimate users. Check out our the setup with personal access tokens for Gitlab Free users

Introduction

You can use service account tokens which Aikido uses to perform the code scanning. You can update this token on the update workspace access token page.

Creating a Service Account and Access Token

1. Navigate to the "Service Accounts" settings page. Group > Settings > Service accounts

   

2. Click on "Add service account"

3. Give a Name and Username to the Service Account and click Create

4. Click the options of the newly created service account and select Manage access tokens

   

5. Click on "Add new token"

6. Enter a name for the token, remove the expiration date or set it to the max value and select the api scope

   
7. Click on "Create token"

   
8. Copy the token and keep it for the "update workspace access token" page

9. Go to the members page: Group > Manage > Members

   

10. Click "Invite Members"

11. Search for your new Service account created earlier and set role to "Maintainer"