An OAuth application on your GitLab, hosted by you or not: every merge request is analysed and annotated, and findings can become issues.
On every push and merge request, infrastructure as code (Terraform, Kubernetes manifests, Dockerfiles) is analysed; a note updated on every commit and a status are posted on the merge request. Secrets and dependencies are analysed too, but their findings appear only in the application.
From the detail panel of a finding, the “Create a ticket” button opens a ticket in this system with the title, severity, resource, rule and fix. The ticket is linked to the finding; Ctadel follows its state for thirty days by polling the system every five minutes, and shows it in the History tab.
From “Settings”, “Integrations” tab, “Git (IaC)” sub-tab, authorise the OAuth application, then create in each project a webhook to your instance with the secret shown once. For issues, connect GitLab in the “Ticketing” sub-tab with a personal token and the project id.
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.