Skip to content

Connect a GitLab project

You sign in to GitLab once, then pick the projects Tracewell may read. Tracewell reads their code and never writes to it.

  • You’re an admin of your Tracewell workspace.
  • The projects are on gitlab.com.
  • You sign in with a GitLab account that can read the projects’ code: for a private project, at least the Reporter role.
  1. In Tracewell, open Settings → Connections. Under Connect repositories, select GitLab, then Continue to GitLab. If you aren’t signed in to GitLab, sign in.
  2. GitLab asks whether to authorize Tracewell and lists what it may do: read the API and read repositories. Check that the request is from Tracewell, then authorize it.
  3. GitLab sends you back to Tracewell, which lists the projects your account can read. Search for them if the list is long, select the ones to connect and select Connect. Do this within an hour.

The projects you picked show as connected. Projects connected already are checked in the list.

Tracewell asks GitLab for two read-only scopes, and nothing that can write:

Scope Used for
read_repository Fetching the project’s code
read_api Checking, when you connect, that your account can read the project

GitLab has no scope for a single project, so the access GitLab grants covers every project your account can read. Tracewell only reads the projects you picked. To keep the access as narrow as GitLab allows, connect with an account that can only read the projects you want Tracewell to see.

Tracewell shows What to do
The GitLab user who approved the connection can’t read … Your account can’t read that project’s code. Get at least the Reporter role, or connect with another account.
This GitLab account can’t read any repository Select Use another account, or ask for access in GitLab.
The GitLab sign-in expired, or was used already You took longer than an hour to pick the projects. Connect GitLab again.

The messages every provider shows are in Manage connections.

To stop Tracewell reading one project, disconnect it under Settings → Connections. Once no connected project uses your sign-in, Tracewell also revokes its access in GitLab.

To remove all access at once, in GitLab open your avatar → Edit profile → Applications. Under Authorized applications, revoke Tracewell. Tracewell can no longer read any of your projects, and their cards show an error.