GitLab

On GitLab, Audit Bench Ai reviews merge requests through a project webhook and posts the review with your access token.

Connect#

1. 1

   Create an access token

   In GitLab, create a personal access token with the read_repository scope to read code, and api so Audit Bench Ai can post review comments. You can also sign in with GitLab instead.

2. 2

   Add it in the app

   In Repository scan, choose GitLab and paste the token. It’s stored encrypted.

3. 3

   Create the webhook in Audit Bench Ai

   Under Webhooks, add one for GitLab. The repository identifier is the project’s numeric Project ID, shown on the project’s overview page. Tick Automatically review new PRs/MRs. Copy the payload URL and the secret; the secret is shown only once.

4. 4

   Add the webhook in GitLab

   In the project, open Settings → Webhooks → Add new webhook. Paste the URL, paste the secret as the Secret token, and tick Merge request events and Comments. Save.

When a review runs#

When a merge request is opened, reopened or updated with new commits. Draft merge requests are skipped, and a commit that’s already been reviewed isn’t reviewed again.

Asking questions#

Mention @auditbench in a merge request comment and it answers in the discussion.

Self-managed GitLab#

The hosted service connects to gitlab.com. If you run your own GitLab instance, contact us about a dedicated or self-hosted setup.