Sign in to Vybscan
Use the account that holds your code. You see only the repositories that account can open.
Continue with GitHub Continue with GitLabVendor/operator access uses an approved GitHub account. Admin sign in →
New to Vybscan? Set it up in a few minutes.
Set up with GitHubInstall the app. No tokens.
- Install the Vybscan GitHub App. You need to be an owner of the organization, or GitHub asks an owner to approve it.
- Pick the organization, then all repositories or only the ones you choose.
- GitHub sends you back here and signs you in. You land on your dashboard.
- The first scan of each repository starts right away. After that, every pull request and push is scanned.
Teammates sign in with Continue with GitHub. Each person sees the repositories they can open on GitHub. To add or remove repositories later, open the organization's Settings → GitHub Apps → Vybscan.
Set up with GitLabConnect the projects you choose with one access token.
- Create a fine-grained token (recommended: it reaches only the projects you pick). In GitLab, click your avatar → Edit profile → Access tokens → Add new token, and choose Fine-grained. Under resources, choose Group and project and pick the projects to scan.
- Give it these permissions: Project: Read · Repository: Read · Branch: Read · Merge request: Read · Work item: Read, Create, Update, Delete (merge-request comments are listed there) · Commit status: Create · Webhook: Create, Read, Update. You must be a Maintainer or Owner of each project.
- Or use a legacy token with the
apiscope: a personal token, or a group or project access token with the Maintainer role. A legacy token can also scan projects added to the group later. - Open Connect GitLab projects and sign in with GitLab. Enter the group path and paste the token. The group path is the part of a project's URL before the project name: for
gitlab.com/acme/shopit isacme. - Press Show projects and tick the ones to scan. A fine-grained token limited to projects cannot list them: paste their URLs, one per line, and press Show projects again.
- Press Connect. Vybscan adds its webhook to each project, starts the first scans and opens your dashboard. After that, every push and merge request is scanned. To add projects later, open the same page again.
Teammates sign in with Continue with GitLab. Each person sees the projects they can open on GitLab. For a self-managed GitLab server, email contact@dheemai.com first.
Signed in but no repositories? Vybscan may not be set up for your organization yet. Follow a guide above, ask your GitHub org owner or GitLab group Maintainer, or email contact@dheemai.com.