AutoFix for Gitlab Cloud with Personal Access Token

When the installation of the Gitlab Autofix integration does not work via the OAuth flow, you can also configure it to work with a Personal Access Token (PAT).

Go to PAT management page in Aikido

First, go to the PAT management page in Aikdo, which can be found here.

Next, follow the instructions below to generate an access token in Gitlab.

Generate a "Group Access Token" in Gitlab

  1. Navigate to 'Settings' > 'Access tokens', via the navigation of your Group's page

    Or use the shortcut link 'Generate Access Token here' on the personal access token management page in Aikido.

    Access token input field with an option to generate or update the token.
  2. You should end up on a page similar to this You can navigate to this page yourself by opening your group's settings menu and selecting "Access tokens"

    GitLab group access tokens dashboard with no active tokens listed.
  3. Click on "Add new token"

  4. Enter a name for token, we suggest something like: "Aikido Security Autofix"

  5. For the expiration, use custom defined and set it to 1 year from now, or remove it.

  6. The token should have at least the role of "Developer"

  7. Next you need to select the following permissions for the token: api and write_repository.

    GitLab group access token creation form with roles, scopes, and expiration settings.
  8. Click on "Create group access token".

  9. Copy the token on the next screen and insert it on the personal access token management page in Aikido.

Last updated

Was this helpful?