Aikido
APIAikido login
  • Docs
  • Changelog
  • Aikido Docs Overview
  • Getting Started
    • General Information
      • Aikido Security Checks
      • Aikido never stores your code
      • Improve risk scoring for repositories and containers
      • Reachability engine to remove false positives
      • Running a successful POC with Aikido
      • SAST by Aikido: supported languages and security focus
      • Scanning Frequencies
    • Setting Up Your Account
      • Create Account and Connect Your Repositories
      • Account Setup with Multiple Gits
      • Link and merge multiple login types (GitHub, GitLab, etc)
      • Managing User Access with Teams
      • Manage and View your Apps and Projects via our Teams Feature
      • Assign Team Responsibilities by Specific Path in Repo
    • Automated User Management
      • Inviting Users to Aikido
      • GitHub Integration: Authentication and User Management
      • Azure DevOps: Authentication and User Management
      • Bitbucket Cloud Integration: Authentication and User Management
      • GitLab Integration: Authentication and User Management
      • GitLab Self-Managed Integration: Authentication and User Management
      • Invite Users to Aikido Without a Git Account
      • Setting Roles and Permissions
    • Core Functionalities
      • Main Feed
      • Manually Adjust Issue Severity
      • Ignore Issues to Remove Issues from Main Feed
      • Snooze Issues for Later
      • Enable SLAs in Aikido
      • Add Custom SAST & IaC Rules
      • Access Control Checks
      • Display License Issues in Feed
    • SAML Login
      • SAML user rights: Access Profiles (Recommended)
      • SAML user rights: Custom Attributes (Advanced)
      • Okta: Login with SAML
      • JumpCloud: Login with SAML
      • Google Workspaces: Login with SAML
      • Microsoft Azure: Login with SAML/ Entra ID
      • Microsoft Azure: Custom attributes with SAML /Entra ID
    • Miscellaneous
      • Generate SBOM based on open-source packages
      • Change Email for Receiving Notifications
      • Limit Aikido access to specific IPs
      • Why Was an Issue Marked as Solved
  • Code Scanning
    • Code Scanning Overview
    • Connect Your Source Code
      • Connect GitHub Account to Aikido
      • Connect Azure DevOps Projects to Aikido
      • Connect Bitbucket Account to Aikido
      • Connect GitLab account to Aikido
      • Connect GitLab Self Managed Server to Aikido
      • How to scan a personal GitLab project
    • Scanning Practices
      • Support for dependency scanning by language
      • Ensuring Aikido Scans New Repositories
      • Ignoring secrets via code comments
      • Vulnerability scanning on private packages - Maven
      • C/C++ Lockfile-less Scanning
      • Java/Scala/Kotlin projects using Gradle: Security scanning best practices
      • Live Secret Detection
      • NET Projects: Security scanning best practices
      • Scala: Dependency Management and Scanning for build.sbt
      • Split Your Monorepo Per Path
      • Use EPSS values to further reduce noise
      • Scanned Branches in Aikido
      • Support for Specific Branch Scanning
      • Support for Multi-Branch Scanning
    • Local Code Scanning
      • Account Creation for Local Scanning on Aikido
      • CLI options for Local Scanner
      • PR and release gating for code using Local Scanner
      • Performing Nightly Scans using the Aikido Local Scanner
      • Local Scanning in existing SCM-Integrated Workspaces
      • GitLab Self Managed Setup for Local Code Scanning
      • Azure DevOps Server Setup for Local Code Scanning
      • Bitbucket Pipeline Setup for Local Code Scanning
      • CircleCI Setup for Local Code Scanning
      • GitHub Action Setup for Local Code Scanning
      • Jenkins Setup for Local Code Scanning
      • Linux Setup for Local Code Scanning
      • Mac Setup for Local Code Scanning
      • Windows Setup for Local Code Scanning
      • Bamboo Setup for Local Code Scanning
      • TeamCity Pipeline Setup for Local Code Scanning
    • Miscellaneous
      • Malware detection in open-source dependencies
      • Allowing IP addresses for code & container scanning
      • Ignore via code with .aikido files
      • Scanning Dev Dependencies for CVEs
      • Why does Aikido not find a specific vulnerability or CVE inside a dependency
  • Cloud Scanning
    • Cloud Scanning Overview
    • Cloud Search: Search asset inventory
    • Custom CSPM Rules
    • AWS Cloud Scanning
      • Connect AWS account to Aikido
    • Azure Cloud Scanning
      • Connect Azure Cloud account
      • Get required values + set up configuration to connect Azure cloud via public API
    • GCP Cloud Sanning
      • Connect GCP account
    • Digital Ocean Cloud Scanning
      • Connect DigitalOcean account
  • Virtual Machine Scanning
    • VM Scanning Overview
    • AWS Virtual Machine Scanning
      • AWS EC2 Virtual Machine Scanning Setup
      • AWS EC2 KMS (Key Management Service) support
    • Azure Virtual Machine Scanning
      • Setup VM Configuration in Azure
      • Azure Virtual Machine Scanning Setup
      • Setup Custom Role in Azure
    • Local VM Scanning
      • Setting up the Local VM Scanner
    • Miscellaneous
      • Denoise VM results by configuring your environments
  • Container Image Scanning
    • Container Image Scanning Overview
    • Cloud Provider Registries
      • Aikido Scanner for AWS ECR
      • Aikido Scanner for GCP Artifact Registry
      • GCP Scanner for GCP Artifact Registry
      • Image scanning for GCP legacy Container Registry
      • Image scanning for Azure Container Registry
      • Image scanning for DigitalOcean Container Registry
    • Standalone Registries
      • Cloudsmith Container Registry
      • Docker Hub images
      • GitHub Container Registry
      • Gitlab Container Registry
      • Gitlab Self Managed Container Registry
      • Harbor Container Registry
      • Image scanning for Sonatype Nexus Repository
      • JFrog Artifactory
      • Quay.io Cloud Registry
      • Scaleway Container Registry
    • Local Image Scanning
      • Setting up image scanning with Local Scanner
      • Setting up kaniko image scanning with Local Scanner
      • PR and release gating using Local Image Scanner
      • BitBucket Pipeline setup for Local Image Scanning
      • CircleCI Setup for Local Image Scanning
      • GitHub Action Setup for Local Image Scanning
      • GitLab Setup for Local Image Scanning
      • Jenkins setup for Local Image Scanning
  • Configuration
    • Link containers to code repositories in bulk via tags (AWS ECR only)
    • Limit image scanning to images with specific tags
    • Detecting outdated runtimes using Aikido
    • Export RAW SBOM of your containers
    • Link Repository to Container
  • DAST / Surface Monitoring
    • DAST Overview
    • Front-end scanning
      • Scan Front-End App domains with Aikido
      • Authenticated Scanning for Front-End Apps
    • API Scanning
      • REST API Scanning
      • GraphQL API Scanning
      • Authenticated API Scanning for REST/GraphQL
      • Understanding and Detecting IDOR Vulnerabilities
  • Hosted 3rd party Apps & Services
    • Scan Hosted 3rd party Apps & Services with Aikido
  • Allowing IP addresses for DAST & Surface monitoring
  • PR & Release Gating
    • PR & Release Gating Overview
    • Overall Functionality
      • Aikido CI Gating Functionality
      • CI Scan History Overview
      • AutoFix suggestions and Inline Commenting for PR Checks
    • GitHub PR Gating
      • GitHub CI PR Gating via Aikido Dashboard
      • GitHub CI PR Gating via GitHub Actions in code
    • Azure PR Gating
      • Azure Pipelines CI: PR Gating via Aikido Dashboard
      • Azure Pipelines CI: PR Gating via Aikido Dashboard with a Personal Access Token
      • Azure Pipelines: Setting up gating for pull requests via code
    • GitLab MR Gating
      • GitLab CI MR Gating via Aikido Dashboard
      • Gitlab (Server) CI: MR Gating via Aikido Dashboard with a Personal Access Token (PAT)
      • GitLab CI: Setting up gating for merge requests via GitLab CI actions in code
    • Bitbucket PR Gating
      • Bitbucket CI: PR Gating via Aikido Dashboard
      • Bitbucket Pipes: Setting up gating for pull requests via Code
  • CLI for PR & Release Gating
    • Aikido CLI: Release and PR Gating
    • Aikido CI API
    • GitHub Action Setup for Aikido CLI: Release Gating
  • Aikido AutoFix
    • Overview Aikido AutoFix
    • AutoFix for Open Source Dependencies
    • AI AutoFix for SAST and IaC Issues
    • AI AutoFix for Containers
    • Automatic Creation of Pull Requests
    • AutoFix Configuration
      • AutoFix for GitHub, Bitbucket and GitLab Cloud
      • AutoFix for Azure DevOps
      • AutoFix for Azure DevOps with Personal Access Token
      • AutoFix for GitLab Self Managed
      • AutoFix for Gitlab Cloud with Personal Access Token
      • Required permissions for Aikido AutoFix Github App
    • Connect Private Packages
      • AWS CodeArtifact - Private packages
      • Bundle - Private gems
      • Composer - Private packages
      • Custom config - Private packages
      • GitHub Registry - Private packages
      • GitLab Registry - Private packages
      • Go - Private Packages
      • Google Artifact Registry - Private packages
      • NPM - Private Packages
      • NuGet - Private packages
      • Poetry - Private packages
  • IDE Plugins
    • IDE Plugins Overview
    • Visual Studio Plugin
    • VS Code Plugin
    • JetBrains IDE Plugins
    • Cursor IDE
    • Windsurf IDE
    • Features
      • Aikido Malware Scanning
    • Troubleshooting
      • JetBrains Plugin - Access token not stored
  • Miscellaneous Integrations
    • Integrations Overview
    • Chat & Alerts
      • Slack notifications
      • Send alerts to multiple Slack channels
      • MS Teams notifications
    • Task Management Systems
      • Asana
      • Azure DevOps Boards
      • ClickUp
      • GitHub Issues
      • GitLab Issues
      • JetBrains YouTrack
      • Jira Cloud
      • Jira Data Center
      • Linear
      • Link Existing Tasks
      • Monday.com
      • Shortcut
      • Smart Issue Routing: Map Repositories to Projects in your Task Manager
      • Troubleshoot Jira Task Creation: Set up Default Issue Types
      • Allowing IP addresses for Issue/Task Tracker integrations
    • Third-Party Scanners
      • How to connect your Sonarcloud account to Aikido
      • Show extra SonarCloud issues in feed by enabling unmapped rules
      • SonarQube Self-Managed
    • Miscellaneous Integrations
      • Forge Integration: Troubleshooting
      • Aikido Webhooks
  • Zen Firewall by Aikido
    • Getting Started with Zen Firewall
    • Zen Installation instructions
      • Configuration via environment variables
      • Creating an Aikido Zen Firewall Token
      • Proxy & Load balancer settings
      • Setup and Installation of Zen Firewall for Dotnet
      • Setup and Installation of Zen Firewall for Java
      • Setup and Installation of Zen Firewall for Node.js (JavaScript & TypeScript)
      • Setup and Installation of Zen Firewall for PHP
      • Setup and Installation of Zen Firewall for Python
    • Zen Features
      • Blocking Bot traffic with Zen Firewall
      • Blocking Tor traffic with Zen Firewall
      • Blocking Users with Zen Firewall
      • Blocking known threat actors with Zen Firewall
      • Blocking traffic by country with Zen Firewall
      • Blocking vs Detection Mode in Zen Firewall
      • Monitor Outbound Domains
      • Setting Up Rate Limiting for Endpoints
      • Understanding Your Zen Statistics
  • Miscellaneous Zen
    • Bot Protection Details
    • How Zen Works: Performance & Reliability
  • ISO 27001 and SOC 2 Compliance
    • Compliance Integrations Overview
    • Drata Compliance integration
    • Sprinto Compliance integration
    • Thoropass Compliance integration
    • Vanta Compliance integration
  1. Getting Started

Setting Up Your Account

Create Account and Connect Your RepositoriesAccount Setup with Multiple GitsLink and merge multiple login types (GitHub, GitLab, etc)Managing User Access with TeamsManage and View your Apps and Projects via our Teams FeatureAssign Team Responsibilities by Specific Path in Repo

Last updated 4 days ago

Was this helpful?