Integrations
Connect the place your code lives and FlawPilot scans the source alongside your live site. GitHub, GitLab and Bitbucket are supported today - pick one below to see exactly how it connects.
OAuth is the fastest way to connect, or use a Personal Access Token. Self-hosted GitLab is supported too.
Supported code hosts
Connect the account your repositories live in. Pick a provider to see exactly how it connects and what FlawPilot can see.
Code hosting
Connect a provider and FlawPilot scans the source: insecure code, exposed secrets and vulnerable dependencies.
- GitHubAvailable nowOAuth or a Personal Access Token
Track repositories from GitHub.com or GitHub Enterprise.
What it reports
- Insecure code
- Exposed secrets
- Vulnerable dependencies
Only the repositories you pick - everything else stays out of view.
How to connect - GitLabAvailable nowOAuth or a Personal Access Token; self-hosted needs its instance URL
Track repositories from GitLab.com or a GitLab instance you run yourself.
What it reports
- Insecure code
- Exposed secrets
- Vulnerable dependencies
Only the repositories you pick - everything else stays out of view.
How to connect - BitbucketAvailable nowOAuth or an access token
Track repositories across your Bitbucket workspaces.
What it reports
- Insecure code
- Exposed secrets
- Vulnerable dependencies
Only the repositories you pick - everything else stays out of view.
How to connect
Notifications
Get scan results where your team already talks, instead of waiting for someone to open the dashboard.
- SlackComing soon
Post scan results and new findings to a channel.
Planned
- New findings
- Scan complete
- Score changes
- Google ChatComing soon
Send scan results to a Google Chat space.
Planned
- New findings
- Scan complete
- Score changes
Frequently asked questions
Connect your first repository
Pick a provider, choose the repos to track, and they're ready for a source-code scan.
