GitLab MR Gating via Aikido Dashboard

Introduction

You can easily configure GitLab MR Gating via the Aikido interface. This functionality allows you to block any newly introduced issues for a certain threshold that you decide. This doc focusses on managing configurations in bulk - multiple repos at the same time - without code.

Use Cases

• Bulk Repository Management: Easily specify and manage configurations for multiple repositories at once through the Aikido interface.

• Zero Code Integration: Install the Aikido app on GitLab to manage checks without embedding any code, simplifying the setup process.

• Cost Efficiency: By managing GitLab Checks through Aikido, avoid using CI minutes on GitLab, leading to significant cost savings.

Setting up GitLab CI

Step 1. Go to the Integrations Page and select GitLab in the CI gating section.

Connect popular CI tools like GitHub, GitLab, Jenkins to block risky code merges.

Step 2 (Optional). Select MR Gating Configuration Via Aikido Dashboard in the modal that pops up. This will open up a new tab with GitLab to install the MR Checks App. Note: this modal will only popup if you have already used Gitlab Pipelines in code.

Select MR gating configuration method for Gitlab: Aikido dashboard or Gitlab Pipelines.

Step 3. Consent to the Aikido MR Checks OAuth app in GitLab. Make sure that you select the GitLab group that is currently being used in your workspace.

Aikido Merge Request Checks requests GitLab API access authorization for user account.

Step 4. Aikido redirects you to the GitLab CI page with an overview of your repos. You can start configuring your repos. We recommend starting out with 1 repo to make sure everything works well.

Step 5. Select repos in bulk and click Setup MR Scans button in the floating bulk action bar on the bottom.

Step 6.This will trigger the modal to choose the severity level for failure and the scans you want to execute.

Security scan settings configuration panel for the "about-github" repository.

If you've added new repositories after the initial setup, you'll need to configure those repos as well.

Adding Exceptions for specific repos

You might want to have 1 specific repo where the configuration slightly differs. You can easily add exceptions by clicking the triple dots on a repo item or just select 1 or more items and go through the Configure Scans process again.

Project dashboard showing critical vulnerabilities and enabled configurations with actions menu open.