...

Onboarding your GitLab instance will require communication with Data Theorem. Please reach out to support@datatheorem.com if you need help!Jump to:

Onboard GitLab

...

Onboard GitLab Cloud

Onboard GitLab Ultimate

(Cloud)

Note that the onboarding user must be an admin within your GitLab Ultimate workspace.

1. Navigate to GitLabgitLab.com.

   

2. Select Groups and select the group that you would like to connect to Data Theorem's SAST analyzer.

   

3. Select Settings, then Applications.

   

4. Select Add new application.

   

5. Configure the application using the following options:

   • Name: Data Theorem SAST

   • Trusted: Not required

   • Redirect URI: https://www.securetheorem.com/gitlab-integration/onboarding

   Check

   • Confidential: checked

6. Enable the api scope checkbox

Enable the

• Scoped: api and read_repository

scope checkbox

• Image Modified

7. Select Save Application

   

8. Send the URL, the Application ID, and the Secret to your Data Theorem contact. These are the credentials that the Data Theorem SAST Analyzer will use to connect to your GitLab instance.

...

8. Your Data Theorem contact will send you an email, so let us know what email address should receive it.

   

9. Important: Click the link in the email, then click Authorize.

   

10. Your GitLab Ultimate instance has been successfully onboarded! Your source code will now continuously be scanned for security and privacy issues, which can be found on https://www.securetheorem.com/mobile-secure/v2/security/sast?view=issues or directly in your GitLab Ultimate merge requests.

    

Onboard GitLab (Self-Managed)

Requirements

• The GitLab installation must be exposed to the internet

• The user following these instructions must have administrator permissions to the GitLab instance

...

• Log into the GitLab instance

• Open “Applications” in the Admin Area
  

  

• Create a new application with the following settings

  • Name: Data Theorem SAST

  • Trusted: Not required

  • Redirect URI: https://www.securetheorem.com/gitlab-integration/onboarding

  • Confidential: checked

  • ScopesScoped: api, and read_repository

...

• The application settings should look like this:

• After pressing “Save application”, transmit the Application ID, Secret, and instance URL (from the address bar of your browser) to the Data Theorem support team

• Ensure that the Data Theorem support team has an email address that can be used to send you information confidentially

...